I want to restrict my TFS 2015 Update 3 (Moving to TFS 2018 shortly) project administrators, so that they are not allowed to add individual users to the TFS security groups. To add users we have in-place a custom solution where users are added to Ldap.
I have came to know from the link that "Edit team project level permission ACLs" permission defines the user management for the Project Administrators.
Is there a way by which I can stop the TFS team project administrators to not allow to add users?