tech·nic·al·ly agile

Granting access to Team Foundation Server 2012 for diagnostic troubleshooting

Learn how to grant access to TFS 2012 for diagnostic troubleshooting without full admin rights. Enhance your efficiency with simple command line solutions!

Published on
2 minute read
Image
https://nkdagility.com/resources/8N31NtGZFyB

In TFS 2012 the product team added a way to get to the tbl_Command information without needing to connect directly to the SQL Server and having access to the tables. This was an awesome add as being able to diagnose server issues and troubleshoot user reported problems makes us a little more efficient.

Granting access to Team Foundation Server 2012 for diagnostic troubleshooting

Figure: Viewing the diagnostic activity logs for troubleshooting

However I had always had to give access by adding the user to the “Team Foundation Administrators” group which is a little too much power just to do a little diagnostic spelunking… so my question is:

How do I give permission to the Activity Log without giving TFS Administrator?

Well, it looks like the command line has the answer. Although there is no representative entry in the GUI to give permission for a user only to the diagnostic troubleshooting page you can grant it explicitly:

tfssecurity /a+ Diagnostic Diagnostic Troubleshoot n:domain\username ALLOW /server:http://tfsserver:8080

This gives that group explicit access.

Granting access to Team Foundation Server 2012 for diagnostic troubleshooting

Figure: Use the command line to grant diagnostic troubleshooting permission

What might be a better and more manageable solution would be to create a group called “Team Foundation Troubleshooters” and instead grant that group permission to that access control. This is done in exactly the same way, you just need to replace the domain account with the TFS Group.

Troubleshooting Practical Techniques and Tooling Install and Configuration System Configuration
Comments

Related blog posts

Related videos

Connect with Martin Hinshelwood

If you've made it this far, it's worth connecting with our principal consultant and coach, Martin Hinshelwood, for a 30-minute 'ask me anything' call.

Our Happy Clients​

We partner with businesses across diverse industries, including finance, insurance, healthcare, pharmaceuticals, technology, engineering, transportation, hospitality, entertainment, legal, government, and military sectors.​

Graham & Brown Logo
Epic Games Logo
Microsoft Logo
Flowmaster (a Mentor Graphics Company) Logo
Healthgrades Logo
MacDonald Humfrey (Automation) Ltd. Logo
Slaughter and May Logo
Genus Breeding Ltd Logo
Alignment Healthcare Logo
YearUp.org Logo
Deliotte Logo
Brandes Investment Partners L.P. Logo
Schlumberger Logo
Bistech Logo
New Signature Logo
Jack Links Logo

CR2

Boeing Logo
Washington Department of Transport Logo
New Hampshire Supreme Court Logo
Department of Work and Pensions (UK) Logo
Ghana Police Service Logo
Washington Department of Enterprise Services Logo
Royal Air Force Logo
Lean SA Logo
Teleplan Logo
ALS Life Sciences Logo
Cognizant Microsoft Business Group (MBG) Logo
Brandes Investment Partners L.P. Logo
Trayport Logo