Team Foundation Server Permissions

This post introduces the concept of permissions in Team Foundation Server, detailing the default groups created for new projects (Project Administrator, Contributor, Reader, Build Services). It explains the explicit authorization settings: Deny (most powerful, overrides Allow), Allow (grants authorization), and Unset (implicitly denies, allows inheritance). Inheritance rules are described, with Deny taking precedence over Allow. The post then enumerates and describes server-level, project-level, area-level, and source control permissions, including their command-line names and descriptions.