Chapter 22
Security and Privileges
What's in this chapter?
Getting to know the different types of users and groups
Understanding the new and interesting permissions
Using tips for managing security
Learning about useful tools
When you first start looking at security, groups, and permissions in Team Foundation Server, you might find it very daunting. This is a large system with many different features. A large part of the customer base also demands fine-grained controls in order to meet compliance goals. Combined, these two features make managing security a sometimes tricky task.
However, by understanding some basic principles and avoiding some of the traps, Team Foundation Server security can be corralled to achieve your security objectives. This chapter examines those principles and provides the information you'll need to avoid common pitfalls.
Users
The first concept to understand in Team Foundation Server security is that there are different types of users, including the following:
- Domain users
- Local users
Domain Users
A domain in a Windows network usually means an Active Directory (AD) domain. AD is a directory and authentication service that comes with Windows Server. User accounts created in the directory are called domain users. In the directory, each user object has a set of properties, including a unique identifier (called a security ID, or SID), a display name, and an e-mail address.
Get Professional Team Foundation Server 2012 now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.