Modify Permissions for a Default Group

You can modify the permissions that have been granted to most of the default groups in a team project collection or a team project. All default groups are created with a specific set of permissions, which might or might not suit the business needs of your organization. You can add or remove permissions for a default group in order to better align with the daily tasks performed by the members of those groups.

Note

Some default groups are derived from other group memberships, and cannot have their permissions changed directly. For more information, see Default Groups.

Some default groups are defined at the collection level, whereas others are defined at the project level. There are different permissions at the collection level than at the project level. Adding or removing a permission from a default group might have significant repercussions for the users that belong to that group. For a full list of collection-level permissions and project-level permissions and a description of the default permissions set for default groups, see Team Foundation Server Default Groups, Permissions, and Roles. Use this list to decide whether you must allow or deny a permission.

Required Permissions

To perform this procedure, you must be a member of the Project Administrators group or have the Edit Project-Level Information permission set to Allow to modify a project-level group. Additionally, you must be a member of the Project Collection Administrators group or have the Edit Collection-Level Information permission set to Allow to modify a collection-level group. For more information about the permissions that are required for adding and removing users to projects, in addition to descriptions of server-level, collection-level, and project-level permissions, see Team Foundation Server Permissions.

To change permissions for a default group at the collection level

  1. In Team Explorer, select the team project collection for which you want to display group permission information.

  2. From the Team menu, point to Team Project Collection Settings, and then click Security.

  3. In the Global Security dialog box, in Users and Groups, select the default group for which you want to display permissions.

  4. Review the list of selected permissions at the bottom of the dialog box. If an item is shaded and cannot be selected, that permission has been set by default and cannot be changed.

  5. For the appropriate permissions at the bottom of the dialog box, select or clear Allow or Deny as appropriate. Click Close when finished.

To change permissions for a default group at the project level

  1. In Team Explorer, select the project for which you want to display group permission information.

  2. From the Team menu, point to Team Project Settings, and then click Security.

  3. In the Project Security dialog box, in Users and Groups, select the default group for which you want to display permissions.

  4. Review the list of selected permissions at the bottom of the dialog box. If an item is shaded and cannot be selected, that permission has been set by default and cannot be changed.

  5. For the appropriate permissions at the bottom of the dialog box, select or clear Allow or Deny as appropriate. Click Close when finished.

See Also

Tasks

Add Users to Team Projects

Concepts

Team Foundation Server Concepts

Team Foundation Server Permissions

Server-Level Groups