a·gen·tic a·gil·i·ty

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

TL;DR; Explains how a global “deny” permission in TFS 2012 can block SharePoint 2010 access, causing TF30063 errors, and highlights where to check for inherited permission issues.

Published on
2 minute read
Image
https://nkdagility.com/resources/-k6KiGvRFB7
Subscribe

No matter what permissions you set or what permissions you have you get a “TF30063: You are not authorized to access /Services/v3.0/LocationService.asmx” in SharePoint 2010.

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

Figure: Errors on the TFS components

And you have checked all of the usual suspects and even use the new TFS 2012 permission tracing features to no avail.

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

Figure: Cannot trace permissions on this item

Applies to

Findings

I don’t know how unique my case is, but if you have searched the heck out of “ TF30063: You are not authorized to access LocationService ” and you still can’t find the issue then it is simple.

You do not have permission to read items in TFS from SharePoint!

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

Figure: Ahhhhhhhhhh

But I am logged in as the TFS Service account, TFS Administrator account and a SharePoint Farm Admin… how many more permission do I need! Here is the deal… you have a “deny” in your permission list somewhere. Deny takes presidence over any other permission. So if you have a deny high up but an allow lower down then this is just tough… denied. And if it is doing this for all of your users regardless of permissions or groups then I have a suspension that there is some deny high up in TFS. There are only two groups that apply to everyone…

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

Figure: [TEAM FOUNDATION]Team Foundation Valid User

There are two places to look for global deny’s and that is the “Valid User” groups at either the server or at the collection level.

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

Figure: [DefaultCollection]Project Collection Valid Users

In this case we upgraded from Team Foundation Server 2008 to 2012 so any permissions carried over would be at the Collection level, so lets start there…

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

Figure: Really… denied at the Project Collection Level

I can’t imagine what was trying to be achieved by this… so I will leave you with…

TFS 2012 - Issue: TF30063: You are not authorized to access and can’t trace permissions

Smart Classifications

Each classification [Concepts, Categories, & Tags] was assigned using AI-powered semantic analysis and scored across relevance, depth, and alignment. Final decisions? Still human. Always traceable. Hover to see how it applies.

Subscribe

Connect with Martin Hinshelwood

If you've made it this far, it's worth connecting with our principal consultant and coach, Martin Hinshelwood, for a 30-minute 'ask me anything' call.

Our Happy Clients​

We partner with businesses across diverse industries, including finance, insurance, healthcare, pharmaceuticals, technology, engineering, transportation, hospitality, entertainment, legal, government, and military sectors.​

Philips Logo

Philips

Trayport Logo

Trayport

Jack Links Logo

Jack Links

Workday Logo

Workday

Bistech Logo

Bistech

Hubtel Ghana Logo

Hubtel Ghana

DFDS Logo

DFDS

Cognizant Microsoft Business Group (MBG) Logo

Cognizant Microsoft Business Group (MBG)

Brandes Investment Partners L.P. Logo

Brandes Investment Partners L.P.

Slicedbread Logo

Slicedbread

Genus Breeding Ltd Logo

Genus Breeding Ltd

Lockheed Martin Logo

Lockheed Martin

Qualco Logo

Qualco

Lean SA Logo

Lean SA

Boeing Logo

Boeing

Microsoft Logo

Microsoft

New Signature Logo

New Signature

Healthgrades Logo

Healthgrades

New Hampshire Supreme Court Logo

New Hampshire Supreme Court

Nottingham County Council Logo

Nottingham County Council

Washington Department of Transport Logo

Washington Department of Transport

Royal Air Force Logo

Royal Air Force

Department of Work and Pensions (UK) Logo

Department of Work and Pensions (UK)

Washington Department of Enterprise Services Logo

Washington Department of Enterprise Services

Schlumberger Logo

Schlumberger

ProgramUtvikling Logo

ProgramUtvikling

Illumina Logo

Illumina

Trayport Logo

Trayport

YearUp.org Logo

YearUp.org

Higher Education Statistics Agency Logo

Higher Education Statistics Agency