Reputation: 121
I have a user who cannot add Tags in TFS encountering error "TF401289: The current user does not have permissions to create tags."
I knew from the very error that there must be something wrong with his access level. Is there anyway I can add a security role with his account that would only allow him to create Tags and without him adding in as Project Administrator? We're using TFS 2015 by the way.
Upvotes: 7
Views: 26683
Reputation: 1
Change user level to Basic
Organization Setting > Users > Change access level
Upvotes: 0
Reputation: 2664
I ran into this same problem using Azure DevOps. The solution was that the people trying to do this had Stakeholder access and needed Basic access (or Visual Studio access).
Upvotes: 5
Reputation: 31063
You can manage the Create tag definition permission on web portal as @MrHinsh mentioned. But you can only use TFSSecurity command-line tool to Delete tag definition, Enumerate tag definition, and Update tag definition. That's why we say you can manage tagging permissions mostly from the TFSSecurity command-line tool.
Although the Create tag definition permission appears in the security settings at the team project level, tagging permissions are actually collection-level permissions that are scoped at the team project level when they appear in the user interface. To scope tagging permissions to a single team project when using the TFSSecurity command, you must provide the GUID for the team project as part of the command syntax. Otherwise, your change will apply to the entire collection.
Detailed information, check this article: https://www.visualstudio.com/en-us/docs/setup-admin/permissions#work-item-tags
Upvotes: 2
Reputation: 23434
The only Tag permission is the Create Tag Definition at the Team Project level that can be added to any user or security group (and Team).
Upvotes: 2