a·gen·tic a·gil·i·ty

TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled

TL;DR; Explains how to resolve TFS Integration Platform errors caused by missing permissions for bypass-rule submission by adding accounts to the Team Foundation Service Accounts group.

Published on
2 minute read
Image
https://nkdagility.com/resources/sb9e7R72Ioq
Subscribe

When you run the TFS Integration Platform for the first time with TFS WIT bypass-rule submission enabled you will likely get the following error:

TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled

Figure: A Runtime Error

Microsoft.TeamFoundation.Migration.Tfs2010WitAdapter.PermissionException: TFS WIT bypass-rule submission is enabled. However, the migration service account ‘TFSService’ is not in the Service Accounts Group on server ‘http://tfsserver:8080/tfs/msf_migrate’.

at Microsoft.TeamFoundation.Migration.Tfs2010WitAdapter.VersionSpecificUtils.CheckBypassRulePermission(TfsTeamProjectCollection tfs)

at Microsoft.TeamFoundation.Migration.Tfs2010WitAdapter.TfsCore.CheckBypassRulePermission()

at Microsoft.TeamFoundation.Migration.Tfs2010WitAdapter.TfsWITMigrationProvider.InitializeTfsClient()

at Microsoft.TeamFoundation.Migration.Tfs2010WitAdapter.TfsWITMigrationProvider.InitializeClient()

at Microsoft.TeamFoundation.Migration.Toolkit.MigrationEngine.Initialize(Int32 sessionRunId)

TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled Applies To

TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled Findings

Only accounts in the Team Foundation Service Accounts are aloud to access the web services directly. By default the account used to install TFS is not added to this group.

In addition you will also be unable to add the account through the UI as editing this group directly is disables. It is meant to be used under the covers for Lab or Build accounts, but the TFS Integration Platform is not an out-of-the-box tool.

TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled

Figure: You can’t edit Team Foundation Service Accounts

This is a special group that does not allow you to populate it through the UI. You can however view it and all of the accounts that you use for your Build Agents, Build Controllers and other bits and bobs will all be in this list already.

You need to use the the command line TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled

TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled Solution

Use the tfssecurity.exe tool to update the Service Accounts Group and add the “TfsAdmin”.

TFS Integration Tools - Issue: TFS WIT bypass-rule submission is enabled

Figure: Updating the TFS Security group

You use our old friend the command line. There is an application called TfsSecurity that will allow you to add an account directly to that group.

1tfssecurity /g+ "Team Foundation Service Accounts" n:domainusername ALLOW /server:http://myserver:8080/tfs

Now you have that sorted you are ready to rock…

Did this help you?

Smart Classifications

Each classification [Concepts, Categories, & Tags] was assigned using AI-powered semantic analysis and scored across relevance, depth, and alignment. Final decisions? Still human. Always traceable. Hover to see how it applies.

Subscribe

Connect with Martin Hinshelwood

If you've made it this far, it's worth connecting with our principal consultant and coach, Martin Hinshelwood, for a 30-minute 'ask me anything' call.

Our Happy Clients​

We partner with businesses across diverse industries, including finance, insurance, healthcare, pharmaceuticals, technology, engineering, transportation, hospitality, entertainment, legal, government, and military sectors.​

Graham & Brown Logo

Graham & Brown

Xceptor - Process and Data Automation Logo

Xceptor - Process and Data Automation

Genus Breeding Ltd Logo

Genus Breeding Ltd

Microsoft Logo

Microsoft

SuperControl Logo

SuperControl

Jack Links Logo

Jack Links

Cognizant Microsoft Business Group (MBG) Logo

Cognizant Microsoft Business Group (MBG)

Healthgrades Logo

Healthgrades

Flowmaster (a Mentor Graphics Company) Logo

Flowmaster (a Mentor Graphics Company)

Higher Education Statistics Agency Logo

Higher Education Statistics Agency

Akaditi Logo

Akaditi

Alignment Healthcare Logo

Alignment Healthcare

Capita Secure Information Solutions Ltd Logo

Capita Secure Information Solutions Ltd

Deliotte Logo

Deliotte

Lockheed Martin Logo

Lockheed Martin

Slaughter and May Logo

Slaughter and May

Brandes Investment Partners L.P. Logo

Brandes Investment Partners L.P.

MacDonald Humfrey (Automation) Ltd. Logo

MacDonald Humfrey (Automation) Ltd.

Royal Air Force Logo

Royal Air Force

Nottingham County Council Logo

Nottingham County Council

Ghana Police Service Logo

Ghana Police Service

Washington Department of Enterprise Services Logo

Washington Department of Enterprise Services

New Hampshire Supreme Court Logo

New Hampshire Supreme Court

Department of Work and Pensions (UK) Logo

Department of Work and Pensions (UK)

Bistech Logo

Bistech

Deliotte Logo

Deliotte

Teleplan Logo

Teleplan

Ericson Logo

Ericson

ALS Life Sciences Logo

ALS Life Sciences

Trayport Logo

Trayport