TFS2015 access issue - tfs-2015

I am new on VS2015 Universal Platform projects and TFS2015.I create a tfs account and new uwp projects. Give permission to another account to build together. However, teammate can see the projects but not all of them. Solution(.sln) file MainPage and .cs files is not visible in his workspace folder. You guys any idea about this problem ?

Permission right usually given on team project level basic. However, in tfs there are also a team project collection level.
If you want to make everyone can see and operate each others project, you need to put your team group into Project Collection Administrators in Collection level
If you don't want everyone have admin right, you need to tell everyone to put the team group into Contributors group in the team project they created.
Please note:
For almost all permissions, deny trumps allow, so if a user belongs to
two groups, and one of them has a specific permission set to deny,
that user will not be able to perform tasks that require that
permission even if they belong to a group that has that permission set
to allow.
So for your solution, add your teammate in contributors group of the team project. And make sure there are no deny permission of read in his account.

Related

Multiuser workspace Tricentis Tosca

Does anyone have solution steps, where I can see how to work on multi user workspace which was created by another user in Tricentis Tosca.
Note: The workspace is stored in MS sql DB by another user, I want to work on same workspace.
I search a lot but not getting details steps.
Before you can work on an object in a multi-user workspace it must be checked out. You might look into taking the Automation Specialist 1 training class as I believe it has a section that covers checkin/checkout.

TF401289: The current user does not have permissions to create tags

I have a user who cannot add Tags in TFS encountering error "TF401289: The current user does not have permissions to create tags."
I knew from the very error that there must be something wrong with his access level. Is there anyway I can add a security role with his account that would only allow him to create Tags and without him adding in as Project Administrator? We're using TFS 2015 by the way.
The only Tag permission is the Create Tag Definition at the Team Project level that can be added to any user or security group (and Team).
You can manage the Create tag definition permission on web portal as #MrHinsh mentioned. But you can only use TFSSecurity command-line tool to Delete tag definition, Enumerate tag definition, and Update tag definition. That's why we say you can manage tagging permissions mostly from the TFSSecurity command-line tool.
Although the Create tag definition permission appears in the security
settings at the team project level, tagging permissions are actually
collection-level permissions that are scoped at the team project level
when they appear in the user interface. To scope tagging permissions
to a single team project when using the TFSSecurity command, you must
provide the GUID for the team project as part of the command syntax.
Otherwise, your change will apply to the entire collection.
Detailed information, check this article: https://www.visualstudio.com/en-us/docs/setup-admin/permissions#work-item-tags
I ran into this same problem using Azure DevOps. The solution was that the people trying to do this had Stakeholder access and needed Basic access (or Visual Studio access).

How to add an existing directory as a new AD in Azure

I have an office 365 account who's directory I want to attach as a new Tennant (probably wrong terminology there) in my Azure account. I'm trying to use the new Office 365 API preview against my existing Office 365 account. So I'm trying to link these two accounts via the Active Directory in Azure.
I log in to my Azure account, go to the Active Directory Node, And select custom create. Nowhere is there an option to "Use existing directory" that I can point to my 365 subscription.
I keep reading documentation that says there should be a dropdown to let me choose that. But I'm not seeing it. All I see are text boxes for "Name", "Domain Name" and Country or region.
Below are two links that mention being able to select "existing" but I'm not seeing it. Has there been a new way to implement this? Or perhaps its some kind of permissions issue. I'm not being given the option to do so because I have insufficient rights.
http://msdn.microsoft.com/en-us/library/office/dn605899(v=office.15).aspx
http://www.clemensreijnen.nl/post/2014/07/11/Add-an-existing-Office-365-Azure-Active-Directory-to-your-Azure-Subscription.aspx

Removing "dead" user accounts from TFS & SQL after server migration

I have searched high and low for a solution to this problem to no avail.
Basically, the situation is as follows:
We are currently migrating our existing TFS server to another machine, which has been going well up until now.
Unfortunately i'm unable to complete the configuration of Report server and the likes as I get the following error:
"Failed to add SWSERVER\susan account to the TFSEXECROLE role on the Tfs_Warehouse relational database"
SWSERVER is the name of the previous machine that hosted the TFS server.
The thing is that SWSERVER\susan is an absolete account, and was actually removed as a user account on the previous machine, which I think is a major part of the problem.
From what I can gather is that TFS can still see it in the restored databases and thinks it's a viable account but seeing as the account technically doesn't exist it can't actually do anything with it.
Another part of the question is that if I go to the original (SWSERVER) and remove the SWSERVER\susan user, will that have an effect on how TFS or SQL operate especially if that account (or any other similar account) are linked to anything in either program?
I'd much appreciate any help anyone can provide.
I've hope i've explained my situation well enough but if anybody needs any more information, please don't hesitate to let me know.
You can't remove users, they will fall out of scope anyway, however that is not your problem. Your TFS instance has been moved from one server to another without following the documented procedure.
You need to follow the instruction to Move Team Foundation Server from one environment to another. Although they will be based on the more common move of Domain to Domain you can think of a non-domain joined server as having a domain of the same name as the local computer.
Now this documentation also follow as using the same hardware so you will need to mix and match between Move Team Foundation Server from one environment to another and Move Team Foundation Server from one hardware configuration to another.
While not really that hard you do need to follow all of the steps...
Just want to thank you for your reply and help. As it turns out I was flogging a dead horse with the TFS Reporting setups when I found out that the reports aren't even used currently on the existing setup.
I did however manage to figure out that if I added every user that previously existed as Windows users on the new machine and then used the TFSconfig Identities /change command to change the domain (machine name, in this case) name to that of the new server then I stopped getting the error messages and after 3-4 reinstall attempts all seems to be working the way it should.
This link was incredibly helpful:
http://msdn.microsoft.com/en-us/library/ms404883.aspx
Thanks again!

Outlook permission on folder vba

First, I want to apologize for my poor English and possibly, the question. I searched a whole day for a possibility to add permissions to a outlook folder via a vba-script, but without results.
We want to create a folder in the inbox and give a specific system user the right to read and write to this folder. This is necessary, because a web-based intranet application has to write into this personal folder in outlook.
All new users of our application must create this folder in outlook and give read/write permission to the system user. For some users its very difficult to manage it and therefore I want to develop an addin in outlook making all this steps automatically.
I read something about Redemption and ACE, but I was unable to use those two libraries, because they are not installed on the system or I don't know how to include them into my Outlook script.
I thought I could write a batch-file that will set up all necessary permissions. Is this possible ? Is there somebody else who have experience with this subject?
I'm looking forward to your responses.
You can either use Extended MAPI in C++ or Delphi to work with the folder's PR_ACL table or you can use Redemption (which exposes this functionality to any language).
Why exactly you couldn't use Redemption? All you need to install it is to register it using regsvr32.exe.