LDSTechForumProjects

Team Project Permission Management Tool

This article is in a draft stage.


This article provides a user guide for the Team Project Permission Management Tool, which has been added to Team System Web Access.

TFS Permission Management Tool

The TFS Permission Management Tool was designed to simplify management of Team Project Group Members and their access to project resources, and to make more management tasks available to project administrators. Some of the features exposed by the Permission Management Tool are tasks that could already be accomplished through Team Explorer, though the steps may have been cumbersome; other tasks could only be accomplished by sending an e-mail to the TFS Team and waiting for them to make the requested changes. Empowering project administrators to quickly accomplish management tasks for their teams means that project teams maintain momentum and productivity.

Limitations

This release of the Permission Management Tool does not include features for managing permissions for Source Control, SharePoint, Reporting Services, or Analysis Services. For Source Control permissions, use Team Explorer. For SharePoint, Reporting Services, and Analysis Services permissions, contact the TFS Team.

How to Access the Permission Management Tool

To ensure availability to the widest possible audience - including those who do not have Visual Studio, Team Explorer, or even a Windows Operating System - the Permission Management Tool is integrated into Team System Web Access. The tool has been tested in Firefox and Internet Explorer, and has been used in Google Chrome.

First, open TSWA by browsing to icstfsweb (a short link for http://icstfsweb.ldschurch.org/tfs/web/). Then click on the new Permissions tab:

PermissionManagementTool.png

Exploring the Permissions Tab

ExploringPermissionsTab1.png
ExploringPermissionsTab2.png
Exploring the Permissions Tab

All Team Project Members

Most features are visible to all Team Project Members, though some may be read-only.

1. Sub-tabs for switching between Group Permissions view and Team Members view.

2. List of Project Groups for the selected Team Project.

3. List of Drop Folders associated with the selected Team Project.

Note: This is not a list of all folders which may exist in the drop location; only the folders which have been associated with this project for management.


4. List of Group Members for the currently-selected Team Project Group.

The following items are for informational use only in this release, but can help give insight into the group membership in your team:

5. List of all Team Project Members for all Project Groups in the selected Team Project.

6. List of groups the selected Team Member belongs to in the selected Team Project.

7. List of groups the selected Team Member belongs to in the entire Team Project Collection.

Project Administrators

The following features are only visible when you are in the Project Administrators group for the selected Team Project.

8. Check box to indicate whether the selected group is explicitly allowed access to the drop folder. When deselected, permissions will be inherited from the parent folder.

9. Add a new Project Group to the selected Team Project.

10. Associate a new or existing drop folder with the selected Team Project.

11. Add a new group member to the selected Team Project Group, plus a drop down to select the Group Member Type. Both Windows Accounts and existing Team Project Groups from the selected Team Project can be added as project members.

12. Toggle Delete Mode for Project Groups.

13. Toggle Delete Mode for Drop Folders.

14. Toggle Delete Mode for Group Members.

How to Get Access to a Specific Project

If you are a Team Member of a Team Project, you can connect to the project through Team System Web Access as described above, then select the project from the drop down in the top left of the application. If the project is not in the list, choose <Connect to a different project>.

ConnectToADifferentProject.png

once the project has been selected, click on the Permissions tab to manage or view team membership and permissions. If you need to be added to a group or granted access to a drop folder, and you are not a project administrator, click on the Project Administrators group and contact one of the people listed as Group Members.

If you are not a Team Member of a Team Project but have been assigned to work on the project and need access, contact your solution manager to find out who is in the Project Administrators group and can add you to the project.

As a last resort, contact the TFS Team to request access to the project.

Managing Project Permissions

As a Project Administrator, you can easily manage group membership and drop folder access for your project using the Permission Management Tool.

Drop Folders

Drop Folder Root Path

This drop folder root path for a team project is always the global drop folder root (\\icstfsdrop\drop\) plus the Team Project name. For example, the drop folder root for the .NET Stack Team Project, MSStack, is \\icstfsdrop\drop\MSStack. By default, this folder should already be associated with each team project, and if you do not need more fine-grained control, you can simply manage access to this folder, as all sub-folders will inherit permissions from this root.

If any of your build definitions point to a path which is not under \\icstfsdrop\drop\, or which references the drop location by IP address instead of by network name, please work to correct those build definitions, as all build output should be dropped under the shared location \\icstfsdrop\drop\.

Adding a Drop Folder to the Project

When a drop folder is added through Permission Management Tool, you are actually creating an association between a file system folder and a project. You can type in the name of an existing folder to associate it with the selected Team Project, or type in the name of a new folder and it will be associated with the selected Team Project and created when necessary.

To add a drop folder to the project, type in the name of the folder in the Add Folder text box (item 10 in the Exploring Permissions Tab image above). Press Enter or click the Add icon, and the folder association will be created under the Drop Folder Root for the project. For example, the .NET Stack Team has some products related to TFS, so we want to create a TFS drop folder to group the output of these products together. We would type TFS in the text box, press Enter or click Add icon, and the association would be created as \\icstfsdrop\drop\MSStack\TFS.

If you need to add a drop folder association for a path that does not match your drop folder root, please contact the TFS Team.

Granting Drop Folder Access to a Project Group

Drop folder access is managed at a Project Group level, not an individual user level. When a Project Group is selected, a column of check boxes will appear in the Drop Folders list under the heading, Allow. To explicitly allow access to a project drop folder, select the check box next to the folder, and the selected group will be allowed to read that folder's contents.

If the Allow check box is deselected, permissions for that folder are inherited from its parent folder.

Note: If you have associated an existing folder with the selected Team Project and that folder already contains many folders and files, the process of allowing access may take several minutes, which can result in a Timeout message from the server. If this happens, please check with the TFS Team to confirm that your selection was applied.


Removing a Drop Folder Access to a Project Group

To remove one or more Drop Folder associations from the selected Team Project, click the Delete Mode icon at the top of the Drop Folders list. When Delete Mode is enabled, the icon turns red and check boxes appear next to each drop folder. Select the Drop Folders you wish to remove, then click the red Delete icon. To cancel the operation, click the Undo icon.

Once you click Delete, the operation cannot be undone, and the selected Project Groups cannot be restored.

Team Members

Adding a Project Group

A new Project Group can be quickly added by typing the new group name in the Add Project Group text box (item 9 in the Exploring Permissions Tab image above). Press Enter or click the Add icon. Project Group names must follow TFS naming rules.

Removing a Project Group

To remove one or more Project Groups from the selected Team Project, click the Delete Mode icon at the top of the Project Groups list. When Delete Mode is enabled, the icon turns red and check boxes appear next to each Project Group name. Select the Project Groups you wish to remove, then click the red Delete icon. To cancel the operation, click the Undo icon.

Once you click Delete, the operation cannot be undone, and the selected Project Groups cannot be restored.

Adding Team Members to a Project Group

Windows Accounts and existing Project Groups can be added as members of a Project Group. Select the type of member (Windows Account or Project Group) from the drop down list at the bottom of the Group Members list, then type the name of the new Group Member in the Add Group Member text box (item 11 in the Exploring image above). Press Enter or click the Add icon, and the new Group Member will be added to the selected Project Group.

Only existing Project Groups and Windows Accounts can be added as Group Members. Attempting to add a new or misspelled group or account will result in an error.

Removing Team Members from a Project Group

To remove one or more Team Members from the selected Project Group, click the Delete Mode icon at the top of the Group Members list. When Delete Mode is enabled, the icon turns red and check boxes appear next to each Group Member's name. Select the Group Members you wish to remove, then click the red Delete icon. To cancel the operation, click the Undo icon.

Delete Mode Icons

Each list in the Group Permissions tab has a Delete Mode icon at the top of the list. When Delete Mode is disabled, the icon is gray.

GrayDeleteModeIcon.png

Click the icon to enable Delete Mode for that list. When Delete Mode is enabled, the icon turns red and check boxes appear next to each list item.

RedDeleteModeIcon.png

After selecting the list items to be removed, click the red Delete icon to remove the items and exit Delete Mode. To cancel the operation and exit Delete Mode without removing any items, click the blue Undo icon.

Troubleshooting

Internet Explorer

Problem Solution
  • Multiple prompts for credentials.
  • Error message when the page first loads.
  • No Groups, Folders, or Group Members listed when the page loads.
Be sure that *.ldschurch.org is added to your Local Intranet security zone.
  • Error message when the page first loads.
  • No Groups, Folders, or Group Members listed when the page loads.
Enable native XMLHTTP support under Advanced Internet Options. This is usually enabled by default.

AdvancedInternetOptions.png

Firefox

Problem Solution
  • Multiple prompts for credentials.
  • Error messages when the page first loads.
  • No Groups, Folders, or Group Members listed when the page loads.
Be sure that ldschurch.org is added to network.automatic-ntlm-auth.trusted-uris under about:config.

AboutConfig.png

This page was last modified on 6 December 2012, at 16:39.

Note: Content found in this wiki may not always reflect official Church information. See Terms of Use.