a·gen·tic a·gil·i·ty

Issue [ TFS 2013 ] InRelease account requires make requests on behalf of others

Explains how to resolve InRelease connection errors with TFS 2013 by granting the required “make requests on behalf of others” permission to the service account.

Published on
2 minute read
Image
https://nkdagility.com/resources/SYCGxfoMPjw
Subscribe

When you try to configure InRelease to connect to your Team Foundation Server 2013 Team Project Collection you get an error message saying that you are unable to connect because you need to be able to requires make requests on behalf of others.

Issue [ TFS 2013 ] InRelease account requires make requests on behalf of others

Figure: Unable to connect to Team Foundation Server

If you check the event log you get:

 1Timestamp: 7/11/2013 10:09:16 AM
 2Message: Unable to connect to this Team Foundation Server: http://caprica:8080/tfs/Tfs01-Scrum/.
 3
 4Possible reasons for failure include:
 5- The name, port number, or protocol for the Team Foundation Server is incorrect.
 6- The Team Foundation Server is offline.
 7- The password has expired or is incorrect.
 8
 9Technical information (for administrator):
10Access Denied: Martin Hinshelwood needs the following permission(s) to perform this action: Make requests on behalf of others.
11Category: General
12Priority: -1
13EventId: 0
14Severity: Error
15Title:
16Machine: CAPRICA
17Application Domain: InCycle.InRelease.Console.exe
18Process Id: 1468
19Process Name: C:Program Files (x86)InCycle SoftwareInReleasebinInCycle.InRelease.Console.exe
20Win32 Thread Id: 5904
21Thread Name:
22Extended Properties:

Applies to

Findings

Just like the TFS Integration Platform if you have a service that requires the “Make requests on behalf of others” then the accounts that it runs under need to be part of the “Team Foundation Service Accounts” group on the Collection. I would think that

Issue [ TFS 2013 ] InRelease account requires make requests on behalf of others

Figure: You can’t edit Team Foundation Service Accounts Group

Unfortunately this group is not editable in the UI as a security precaution and in keeping with TFS tradition those things are relegated to the command line so that it scares off those for whom its not really that important.

Now while in a real server you should have a service account my TFS Server runs under network service and you can’t pick network service in InRelease.

Solution

Whatever account that you want to run InRelease under you need to add it to the Team Foundation Service accounts group to get the “make requests on behalf of others” capability.

Issue [ TFS 2013 ] InRelease account requires make requests on behalf of others

Figure: Add permission with TFSSercurity command

1tfssecurity /g+ "Team Foundation Service Accounts" n:nakedalmTfInRelease ALLOW /server:http://caprica:8080/tfs

When you execute the command TFS will go off and add the account to the group. You could do this per collection, but I am just giving it access to every collection on the server.

Issue [ TFS 2013 ] InRelease account requires make requests on behalf of others

Figure: Green tick for account that now has make requests on behalf of others

I could have given explicit permission to that account or even created a special group with just that permission but this is the recommended option to solving the problem.

Troubleshooting Install and Configuration Software Development System Configuration
Subscribe

Related Blog

No related videos found.

Connect with Martin Hinshelwood

If you've made it this far, it's worth connecting with our principal consultant and coach, Martin Hinshelwood, for a 30-minute 'ask me anything' call.

Our Happy Clients​

We partner with businesses across diverse industries, including finance, insurance, healthcare, pharmaceuticals, technology, engineering, transportation, hospitality, entertainment, legal, government, and military sectors.​

Kongsberg Maritime Logo

Kongsberg Maritime

Qualco Logo

Qualco

Freadom Logo

Freadom

Microsoft Logo

Microsoft

Flowmaster (a Mentor Graphics Company) Logo

Flowmaster (a Mentor Graphics Company)

Slaughter and May Logo

Slaughter and May

Cognizant Microsoft Business Group (MBG) Logo

Cognizant Microsoft Business Group (MBG)

Ericson Logo

Ericson

Jack Links Logo

Jack Links

SuperControl Logo

SuperControl

ProgramUtvikling Logo

ProgramUtvikling

New Signature Logo

New Signature

Boxit Document Solutions Logo

Boxit Document Solutions

MacDonald Humfrey (Automation) Ltd. Logo

MacDonald Humfrey (Automation) Ltd.

Lean SA Logo

Lean SA

Teleplan Logo

Teleplan

Brandes Investment Partners L.P. Logo

Brandes Investment Partners L.P.

Healthgrades Logo

Healthgrades

Department of Work and Pensions (UK) Logo

Department of Work and Pensions (UK)

New Hampshire Supreme Court Logo

New Hampshire Supreme Court

Washington Department of Transport Logo

Washington Department of Transport

Ghana Police Service Logo

Ghana Police Service

Washington Department of Enterprise Services Logo

Washington Department of Enterprise Services

Nottingham County Council Logo

Nottingham County Council

Philips Logo

Philips

Qualco Logo

Qualco

Big Data for Humans Logo

Big Data for Humans

Ericson Logo

Ericson

Xceptor - Process and Data Automation Logo

Xceptor - Process and Data Automation

Boeing Logo

Boeing