Use TFSSecurity to Change Permissions

Question

I want to change the permissions associated with a group via the TFSSecurity tool.

Apparently, the following command sets the "View instance-level information" permission:

>tfssecurity /a+ Server FrameworkGlobalSecurity GenericRead sid:[Group SID] ALLOW /server:[Server URI]

This works fine - but obviously how do I set the levels for other permissions? I assume that "FrameworkGlobalSecurity" is the part of this command that maps to "View instance-level information", but what about the other types of permissions?

Answer 1

This is an old question but I was looking for the same thing as you were and the following resource helped me finally to do so: Add permissions with TFSSecurity–The ultimate reference

But let's start from scratch:

1. First check what you want to do with TFSSecurity
2. Second check the permission you want to add
3. Third check the Token you need to do so with the provided link above