Rakesh Luhar

I add three user to Builtin Project administrator group and try to loging with that user, i am not able to see any information of project and it give error that u not have enough permission on TFS. Then i made custom group and give all permission for project then everything goes fine. Can some one guide me what would be wrong

Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Adam Singer - MSFT

When you add users to an external group that already is a member of a TFS group, you need to wait for a sync to occur before those users have permissions to the system. I have a blog post with more details on the subject called "Get your users for nothin' and your sync for free".

Cheers,
Adam






Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Rakesh Luhar

Thanks for taking interest and reply.

But the problem is different now I am writing in detail what I did.

For more Granularity in permission we perform following steps:

  1. Create Global group on Team Foundation Server according to different role given for CMMI in the Visual Studio Team Foundation Administrator Guide.
  2. We give permission according to role on Server, Project, Area and Source Control.
  3. For different role we create user in Active directory.
  4. We made the user in member of group according to role.
  5. As mention in Admin guide ( Three group Development Manager, Release Manager and Project Manager) we add in project administrator group which are by default available when we create new project.

After all this we observe that the when we login as users which are member of Project Administrator group, It was not show any workitem and even we try to add workitem through Excel and try to publish it giving error that user not have enough permission on TFS.

To solve this right now we made one Project Admin group and give all the project level permission and made all that user member of this group and it is going fine.

I hope this would be more clear b'coz we check after one day.





Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Adam Singer - MSFT

I'm not sure I fully understand who you assigned permissions to.

  • In step 2, you say "we gave permission according to role". Did you grant these permissions to the "Global group" in step 1 A different TFS group Domain groups Domain users
  • In step 4, did you add the user to Domain groups, or TFS groups
  • What group(s) did you add the Project Administrator's group in step 5 The Dev Manager, Release Manager, and Project Manager groups Are any of those groups denied certain permissions If so, please recall that "deny" permissions always trump "allow" permissions. Therefore, if the Project Administrators group is in two groups, one of which is denied and one of which is allowed a permission, the Project Administrators will be denied the permission. If the permission is not set for one of the groups, however, that won't trump an "allow"

Cheers,
Adam






Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Rakesh Luhar

As we created Globle group on TFS according to the role people going to perform (Auditor, Project manager, Developer.....etc as given Roles for CMMI in TFS Admin Guide).

As mention in TFS Admin guide Three groups(Developer Manager, Release Manager and Project manager) we made member of Project administrator group(Which is available by default). so they should get permission of Project Administrator.

Then we create user in Active Directory and give membership of different globle group of TFS that we made in step 1.

After that we try to login as different user and we come to know that the user which are member of Project Administrator group are not able to do anything with project.

There is no deny permission because this is the first project we make for sample. and we just add the user. if we make anyother user in the project administrator group this happen.

This all things we are doing 180 days trial version and are trying to find out that how this tool help for getting CMMI.

we are looking for some sample project (For Software Development of any IT field) if we can get and just enter it in and play with it and want to check how it will go for our organisation.

I hope this will make everything clear to you

Thanks for taking insterest

Rakesh Luhar





Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Adam Singer - MSFT

Ok- I think I'm getting a clearer picture now. Just a few more questions to help pinpoint the problem:

  • Do you see an error message when you try to first connect to the Team Foundation Server, or subsequently when trying to work with the project
  • What is the complete text of the error message
  • Can you install Team Explorer on the AT and try to run it there as the user you're having trouble with It could be that the connection is refused by your firewall, network, or other similar settings. You can also just open a command prompt as the user on the AT and run "TfsSecurity.exe /im adm: /server:<YourServerName>" from the Tools folder of "%PROGRAMFILES%\Microsoft Visual Studio 2005 Team Foundation Server" to see if that allows the user to connect.

Cheers,
Adam






Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Rakesh Luhar

  • It is not giving error when we connect to server or project with that user name. It allow user to connect but when we click on all workitem query it is does not show any workitems.
  • when we try to add workitem through excel. At the time of publish in Issue it show "Access Denied" and in the screen at down it show user does not have sufficient permission to save work item to server.

As you suggest i install team explorer on the same Computer where i have TFSAs you suggest i install team explorer on the same Computer where i have TFS and problem remain same. If i make user in Builting Project Administrator Account it is not showing anything but the same time if i make the member of system which globle group is created by myself , everything working good.

One more thing that it available in team valid user list also as all other user.

Thanks

Rakesh Luhar





Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Matthew Mitrik MSFT

Hi Rakesh,

Was this issue ever resolved

-Matt






Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Rakesh Luhar

No Still the Issue is there but one more thing i notice is that I created new project and with other project this is working fine but this problem is only with one project.

Thanks





Re: Team Foundation Server - Administration Unable to see information when user added to project administrator group

Adam Singer - MSFT

You may need to contact product support on this one- it's unclear what else we can troubleshoot over the forums to help pinpoint the issue.

Best of luck-

Cheers,
Adam