TFS default installation creates several default groups that we can use to control access permissions for all TFS users. Here is a list of these groups with permissions:
| Group | Permissions |
|---|
| Team Foundation Administrators | Can perform all privileged operations on the Team Foundation Server. |
| Team Foundation Valid Users | Have access to the Team Foundation Server. You cannot manually add or remove users or groups from this group in the Team Foundation Server user interface. |
| Team Foundation Service Accounts | Contains service accounts. |
| Team Foundation Licensed Users | Allows 1-5 users to connect to the server installed with Team Foundation Server Work Group Edition. It is only create for Server Work Group. |
When we create new project, TFS also creates the following project groups. These groups can be used to control security permissions within any given project.
| Group | Permissions |
|---|
| Project Administrators | Can manage the team project. |
| Project Reader | Can see the team project (read access). |
| Project Contributor | Can modify the team project (read and write access). |
| Project Build Services | Can build the project. |
In order to see these groups we need to navigate to Global Groups Screen as shown on the picture below
TFS Settings
We need to select Group Membership option in order to examine default groups installed on our TFS as part of installation process.
TFS Global Groups