Project Server 2013 Issue - TF294003: Cannot access the following PWA instance
Explains how to resolve TF294003 errors when connecting Team Foundation Server 2012 to Project Server 2013 by updating the TFS service account …
TL;DR; Explains how a global “deny” permission in TFS 2012 can block SharePoint 2010 access, causing TF30063 errors, and highlights where to check for inherited permission issues.
No matter what permissions you set or what permissions you have you get a “TF30063: You are not authorized to access /Services/v3.0/LocationService.asmx” in SharePoint 2010.
Figure: Errors on the TFS components
And you have checked all of the usual suspects and even use the new TFS 2012 permission tracing features to no avail.
Figure: Cannot trace permissions on this item
I don’t know how unique my case is, but if you have searched the heck out of “ TF30063: You are not authorized to access LocationService ” and you still can’t find the issue then it is simple.
You do not have permission to read items in TFS from SharePoint!
Figure: Ahhhhhhhhhh
But I am logged in as the TFS Service account, TFS Administrator account and a SharePoint Farm Admin… how many more permission do I need! Here is the deal… you have a “deny” in your permission list somewhere. Deny takes presidence over any other permission. So if you have a deny high up but an allow lower down then this is just tough… denied. And if it is doing this for all of your users regardless of permissions or groups then I have a suspension that there is some deny high up in TFS. There are only two groups that apply to everyone…
Figure: [TEAM FOUNDATION]Team Foundation Valid User
There are two places to look for global deny’s and that is the “Valid User” groups at either the server or at the collection level.
Figure: [DefaultCollection]Project Collection Valid Users
In this case we upgraded from Team Foundation Server 2008 to 2012 so any permissions carried over would be at the Collection level, so lets start there…
Figure: Really… denied at the Project Collection Level
I can’t imagine what was trying to be achieved by this… so I will leave you with…
Each classification [Concepts, Categories, & Tags] was assigned using AI-powered semantic analysis and scored across relevance, depth, and alignment. Final decisions? Still human. Always traceable. Hover to see how it applies.
If you've made it this far, it's worth connecting with our principal consultant and coach, Martin Hinshelwood, for a 30-minute 'ask me anything' call.
We partner with businesses across diverse industries, including finance, insurance, healthcare, pharmaceuticals, technology, engineering, transportation, hospitality, entertainment, legal, government, and military sectors.
Philips
Trayport
Jack Links
Workday
Bistech
Hubtel Ghana
DFDS
Cognizant Microsoft Business Group (MBG)
Brandes Investment Partners L.P.
Slicedbread
Genus Breeding Ltd
Lockheed Martin
Qualco
Lean SA
Boeing
Microsoft
New Signature
Healthgrades
New Hampshire Supreme Court
Nottingham County Council
Washington Department of Transport
Royal Air Force
Department of Work and Pensions (UK)
Washington Department of Enterprise Services
Schlumberger
ProgramUtvikling
Illumina
Trayport
YearUp.org
Higher Education Statistics Agency