TFS Security - Browsr Server

0
votes

I have set up TFS Security using Active Directory groups and in source control explorer through Visual Studio, users only see Team Projects that they have access to. However if they go to Team Explorer and click on the drop down menu they see almost all the team projects. If they go to web Tfs as well, the behaviour is exactly the same.

How do i restrict them to only see projects in dropdown that they have access to? enter image description here

Project Collection Valid Users Group - Permissions enter image description here

Project Collection Test Service Accounts - Permissions enter image description here

Project Collection Service Accounts - Permissions enter image description here

Project Collection Proxy Service Accounts - Permissions enter image description here

Project Collection Build Service Accounts - Permissions enter image description here

Project Collection Build Administrators - Permissions enter image description here

--At Project Level--

All Project Valid Users group at Project Level are members of Project Collection Valid Users group enter image description here

User Access From Collection Level: ![enter image description here

1
tfs-2015tfs-security

1 Answers

0
votes

You need to add the user/groups to the specific team project but not in Collection level. Thus , the restricted user/groups can only see the specific team projects which they have permissions under the collection.

In Team Explorer you can select the projects which you want to connect/display.

Update:

  1. Add the group under specific team project (Set permissions in Project level)
  2. Add the same group under the specific collection
  3. Under the collection security set "View Collection Level Information" to "Deny" for the group (Set permissions in Collection level)

Then the users in the group will can only access TFS with project permissions.

enter image description here