What are the minimum permissions required for a user to add capabilities to a TFS build agentWhy and when to have multiple build agents?Configuring a TFS2015 build agent fails because agent pool not found. Why?Minimum permissions to give to a project managerTFS user cannot set permission for create tag for other usersTFS Build agent throws “unauthorized” exceptionAdmin user not able to manage permission for Team Project in TFS 2015Remove “Edit team project level permission ACLs” from TFS project admins so that they are not allowed to add usersPermissions required for these TFS (on premise) REST urls?TFS 2018 Manage permissions issue for service account on build serverHow to grant a TFS build agent access rights to TFS REST API?
Semen retention is a important thing in Martial arts?
Piece of chess engine, which accomplishes move generation
Shouldn't there be "us" instead of "our" in this sentence?
Summoning A Technology Based Demon
Why does the Rust compiler not optimize code assuming that two mutable references cannot alias?
Why was the LRV's speed gauge displaying metric units?
2010 (?) science fiction TV show with new world
What is a good example for artistic ND filter applications?
How to improve king safety
Self-deportation of American Citizens from US
Omnidirectional LED, is it possible?
GNU sort stable sort when sort does not know sort order
Nuclear breeder/reactor plant controlled by two A.I. makes too much power
GNU GPL V3 with no code change disclosure
Is there a word to describe someone who is, or the state of being, content with hanging around others without interacting with them?
How can I kill my goat?
How does a poisoned arrow combine with the spell Conjure Barrage?
How to season a character?
Why force the nose of 737 Max down in the first place?
Do the books ever say oliphaunts aren’t elephants?
Is The Venice Syndrome documentary cover photo real?
Trying to open a new ubuntu terminal window from the existing window
Is SecureRandom.ints() secure?
Why did House of Representatives need to condemn Trumps Tweets?
What are the minimum permissions required for a user to add capabilities to a TFS build agent
Why and when to have multiple build agents?Configuring a TFS2015 build agent fails because agent pool not found. Why?Minimum permissions to give to a project managerTFS user cannot set permission for create tag for other usersTFS Build agent throws “unauthorized” exceptionAdmin user not able to manage permission for Team Project in TFS 2015Remove “Edit team project level permission ACLs” from TFS project admins so that they are not allowed to add usersPermissions required for these TFS (on premise) REST urls?TFS 2018 Manage permissions issue for service account on build serverHow to grant a TFS build agent access rights to TFS REST API?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
A user who is in the project administrators role and an administrator for the agent pool containing an existing build agent receives a permission denied message when trying to add a user defined capability to the build agent. What additional permissions do they need to be able to make this change?
They cannot be added as a TFS administrator or a collection administrator for internal security reasons.
tfs
asked Mar 26 at 20:30
jimjim
61 bronze badge
add a comment |
A user who is in the project administrators role and an administrator for the agent pool containing an existing build agent receives a permission denied message when trying to add a user defined capability to the build agent. What additional permissions do they need to be able to make this change?
They cannot be added as a TFS administrator or a collection administrator for internal security reasons.
tfs
asked Mar 26 at 20:30
jimjim
61 bronze badge
add a comment |
A user who is in the project administrators role and an administrator for the agent pool containing an existing build agent receives a permission denied message when trying to add a user defined capability to the build agent. What additional permissions do they need to be able to make this change?
They cannot be added as a TFS administrator or a collection administrator for internal security reasons.
tfs
asked Mar 26 at 20:30
jimjim
61 bronze badge
A user who is in the project administrators role and an administrator for the agent pool containing an existing build agent receives a permission denied message when trying to add a user defined capability to the build agent. What additional permissions do they need to be able to make this change?
They cannot be added as a TFS administrator or a collection administrator for internal security reasons.
tfs
tfs
asked Mar 26 at 20:30
jimjim
61 bronze badge
asked Mar 26 at 20:30
jimjim
61 bronze badge
asked Mar 26 at 20:30
jimjim
61 bronze badge
asked Mar 26 at 20:30
jimjim
61 bronze badge
asked Mar 26 at 20:30
jimjim
61 bronze badge
61 bronze badge
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
You could add your custom user-defined capabilities with following steps:
- Go to Agent Pools through the Settings button on top of the menu.
- Select one of the agent in your agent pool.
- Click the Capabilities tab to add your custom capabilities.
If the user is without permission to do this, you could try to add his account as the “Service Account” or “Administrator” role of the agent in the queue.
You could also give him the Administrator Role on a project agent pool. More details please take a look at this link: https://docs.microsoft.com/zh-cn/azure/devops/pipelines/agents/pools-queues?view=azure-devops#security
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
They are already assigned as an administrator for the agent pool at the collection level containing the specific agents. At the project level they are a project administrator and that group is assigned administrator permissions to the project's agent queue. In retrospect I did not say this is TFS on-prem and the version is 2017U2.
– jim
Mar 27 at 14:39
@jim This is weird, did this only occurs for a specific agent or all agents. Did this agent configured as Interactive or service mode?
– PatrickLu-MSFT
Mar 28 at 10:13
I believe they are running as a service. I am have asked the users to run some test scenarios to see if this is an issue for all the users in this role and on all the pools they are assigned to. They're on the other side of the world so it will be a while.
– jim
Mar 29 at 12:18
The users eventually got back to me. They say it now works! I guess they were doing something wrong.
– jim
Apr 5 at 17:42
@jim Thanks for your kindly feedback. Should be, the permission you have assigned is sure enough. If my reply helped or gave a right direction. Appreciate for marking it as an answer which will also helps others in the community.
– PatrickLu-MSFT
Apr 8 at 9:39
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55365736%2fwhat-are-the-minimum-permissions-required-for-a-user-to-add-capabilities-to-a-tf%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You could add your custom user-defined capabilities with following steps:
- Go to Agent Pools through the Settings button on top of the menu.
- Select one of the agent in your agent pool.
- Click the Capabilities tab to add your custom capabilities.
If the user is without permission to do this, you could try to add his account as the “Service Account” or “Administrator” role of the agent in the queue.
You could also give him the Administrator Role on a project agent pool. More details please take a look at this link: https://docs.microsoft.com/zh-cn/azure/devops/pipelines/agents/pools-queues?view=azure-devops#security
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
They are already assigned as an administrator for the agent pool at the collection level containing the specific agents. At the project level they are a project administrator and that group is assigned administrator permissions to the project's agent queue. In retrospect I did not say this is TFS on-prem and the version is 2017U2.
– jim
Mar 27 at 14:39
@jim This is weird, did this only occurs for a specific agent or all agents. Did this agent configured as Interactive or service mode?
– PatrickLu-MSFT
Mar 28 at 10:13
I believe they are running as a service. I am have asked the users to run some test scenarios to see if this is an issue for all the users in this role and on all the pools they are assigned to. They're on the other side of the world so it will be a while.
– jim
Mar 29 at 12:18
The users eventually got back to me. They say it now works! I guess they were doing something wrong.
– jim
Apr 5 at 17:42
@jim Thanks for your kindly feedback. Should be, the permission you have assigned is sure enough. If my reply helped or gave a right direction. Appreciate for marking it as an answer which will also helps others in the community.
– PatrickLu-MSFT
Apr 8 at 9:39
add a comment |
You could add your custom user-defined capabilities with following steps:
- Go to Agent Pools through the Settings button on top of the menu.
- Select one of the agent in your agent pool.
- Click the Capabilities tab to add your custom capabilities.
If the user is without permission to do this, you could try to add his account as the “Service Account” or “Administrator” role of the agent in the queue.
You could also give him the Administrator Role on a project agent pool. More details please take a look at this link: https://docs.microsoft.com/zh-cn/azure/devops/pipelines/agents/pools-queues?view=azure-devops#security
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
They are already assigned as an administrator for the agent pool at the collection level containing the specific agents. At the project level they are a project administrator and that group is assigned administrator permissions to the project's agent queue. In retrospect I did not say this is TFS on-prem and the version is 2017U2.
– jim
Mar 27 at 14:39
@jim This is weird, did this only occurs for a specific agent or all agents. Did this agent configured as Interactive or service mode?
– PatrickLu-MSFT
Mar 28 at 10:13
I believe they are running as a service. I am have asked the users to run some test scenarios to see if this is an issue for all the users in this role and on all the pools they are assigned to. They're on the other side of the world so it will be a while.
– jim
Mar 29 at 12:18
The users eventually got back to me. They say it now works! I guess they were doing something wrong.
– jim
Apr 5 at 17:42
@jim Thanks for your kindly feedback. Should be, the permission you have assigned is sure enough. If my reply helped or gave a right direction. Appreciate for marking it as an answer which will also helps others in the community.
– PatrickLu-MSFT
Apr 8 at 9:39
add a comment |
You could add your custom user-defined capabilities with following steps:
- Go to Agent Pools through the Settings button on top of the menu.
- Select one of the agent in your agent pool.
- Click the Capabilities tab to add your custom capabilities.
If the user is without permission to do this, you could try to add his account as the “Service Account” or “Administrator” role of the agent in the queue.
You could also give him the Administrator Role on a project agent pool. More details please take a look at this link: https://docs.microsoft.com/zh-cn/azure/devops/pipelines/agents/pools-queues?view=azure-devops#security
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
You could add your custom user-defined capabilities with following steps:
- Go to Agent Pools through the Settings button on top of the menu.
- Select one of the agent in your agent pool.
- Click the Capabilities tab to add your custom capabilities.
If the user is without permission to do this, you could try to add his account as the “Service Account” or “Administrator” role of the agent in the queue.
You could also give him the Administrator Role on a project agent pool. More details please take a look at this link: https://docs.microsoft.com/zh-cn/azure/devops/pipelines/agents/pools-queues?view=azure-devops#security
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
edited Mar 27 at 7:11
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
answered Mar 27 at 6:57
PatrickLu-MSFTPatrickLu-MSFT
31.1k4 gold badges13 silver badges40 bronze badges
31.1k4 gold badges13 silver badges40 bronze badges
They are already assigned as an administrator for the agent pool at the collection level containing the specific agents. At the project level they are a project administrator and that group is assigned administrator permissions to the project's agent queue. In retrospect I did not say this is TFS on-prem and the version is 2017U2.
– jim
Mar 27 at 14:39
@jim This is weird, did this only occurs for a specific agent or all agents. Did this agent configured as Interactive or service mode?
– PatrickLu-MSFT
Mar 28 at 10:13
I believe they are running as a service. I am have asked the users to run some test scenarios to see if this is an issue for all the users in this role and on all the pools they are assigned to. They're on the other side of the world so it will be a while.
– jim
Mar 29 at 12:18
The users eventually got back to me. They say it now works! I guess they were doing something wrong.
– jim
Apr 5 at 17:42
@jim Thanks for your kindly feedback. Should be, the permission you have assigned is sure enough. If my reply helped or gave a right direction. Appreciate for marking it as an answer which will also helps others in the community.
– PatrickLu-MSFT
Apr 8 at 9:39
add a comment |
They are already assigned as an administrator for the agent pool at the collection level containing the specific agents. At the project level they are a project administrator and that group is assigned administrator permissions to the project's agent queue. In retrospect I did not say this is TFS on-prem and the version is 2017U2.
– jim
Mar 27 at 14:39
@jim This is weird, did this only occurs for a specific agent or all agents. Did this agent configured as Interactive or service mode?
– PatrickLu-MSFT
Mar 28 at 10:13
I believe they are running as a service. I am have asked the users to run some test scenarios to see if this is an issue for all the users in this role and on all the pools they are assigned to. They're on the other side of the world so it will be a while.
– jim
Mar 29 at 12:18
The users eventually got back to me. They say it now works! I guess they were doing something wrong.
– jim
Apr 5 at 17:42
@jim Thanks for your kindly feedback. Should be, the permission you have assigned is sure enough. If my reply helped or gave a right direction. Appreciate for marking it as an answer which will also helps others in the community.
– PatrickLu-MSFT
Apr 8 at 9:39
They are already assigned as an administrator for the agent pool at the collection level containing the specific agents. At the project level they are a project administrator and that group is assigned administrator permissions to the project's agent queue. In retrospect I did not say this is TFS on-prem and the version is 2017U2.
– jim
Mar 27 at 14:39
They are already assigned as an administrator for the agent pool at the collection level containing the specific agents. At the project level they are a project administrator and that group is assigned administrator permissions to the project's agent queue. In retrospect I did not say this is TFS on-prem and the version is 2017U2.
– jim
Mar 27 at 14:39
@jim This is weird, did this only occurs for a specific agent or all agents. Did this agent configured as Interactive or service mode?
– PatrickLu-MSFT
Mar 28 at 10:13
@jim This is weird, did this only occurs for a specific agent or all agents. Did this agent configured as Interactive or service mode?
– PatrickLu-MSFT
Mar 28 at 10:13
I believe they are running as a service. I am have asked the users to run some test scenarios to see if this is an issue for all the users in this role and on all the pools they are assigned to. They're on the other side of the world so it will be a while.
– jim
Mar 29 at 12:18
I believe they are running as a service. I am have asked the users to run some test scenarios to see if this is an issue for all the users in this role and on all the pools they are assigned to. They're on the other side of the world so it will be a while.
– jim
Mar 29 at 12:18
The users eventually got back to me. They say it now works! I guess they were doing something wrong.
– jim
Apr 5 at 17:42
The users eventually got back to me. They say it now works! I guess they were doing something wrong.
– jim
Apr 5 at 17:42
@jim Thanks for your kindly feedback. Should be, the permission you have assigned is sure enough. If my reply helped or gave a right direction. Appreciate for marking it as an answer which will also helps others in the community.
– PatrickLu-MSFT
Apr 8 at 9:39
@jim Thanks for your kindly feedback. Should be, the permission you have assigned is sure enough. If my reply helped or gave a right direction. Appreciate for marking it as an answer which will also helps others in the community.
– PatrickLu-MSFT
Apr 8 at 9:39
add a comment |
Got a question that you can’t ask on public Stack Overflow? Learn more about sharing private information with Stack Overflow for Teams.
Got a question that you can’t ask on public Stack Overflow? Learn more about sharing private information with Stack Overflow for Teams.
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55365736%2fwhat-are-the-minimum-permissions-required-for-a-user-to-add-capabilities-to-a-tf%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
