I recently upgraded from TFS 2010 SP1 to TFS 2012 Update 3 and have a permission problem in one (but only one) of my upgraded team projects. Even though my current user is admin of everything (local machine, TFS, project collection, SharePoint, report server) I can't add members to the "Project Administrators" group. When I click on "Add Windows user or group" or "Add TFS group" it just shows the error message "You do not have the required permissions to perform this action" as can be seen here:
But that's not the only weird thing about this one team project:
A) It only shows two groups in the team project, all other team projects additionally also have a team ("[project name] Team") and 3 TFS groups ("Builders", "Contributors", "Readers").
B) Its "Project Valid Users" group is listed twice in the members of the "Project Collection Valid Users" group. But if I open the "member of" page of the "Project Valid Users" group the "Project Collection Valid Users" group is only listed once.
Is there any way to reset the permissions/groups of a team project? Or any other way to fix this?
Edit:
I've now tried the TFS Admin Tool. It also isn't able to add users but at least it gives a good error message:
Type: System.Web.Services.Protocols.SoapException
Message: Multiple identities found matching '[projectname]\Project Administrators'. Use the unique name to specify one of the following identities:
- [projectname]\Project Administrators (unique name: vstfs:///Classification/TeamProject/df734fb3-0868-448a-b44e-bab6f8426bf8\Project Administrators)
- [projectname]\Project Administrators (unique name: vstfs:///Classification/TeamProject/1f1d053a-1aa3-4734-b876-5a2bc7e42703\Project Administrators)
Only one of those GUIDs actually appear in the Project table in the Tfs_DefaultCollection database. Does anyone know how I can get rid of the wrong one?
Edit 2:
I've now tried the following:
> tfssecurity /gd "adm:vstfs:///Classification/TeamProject/df734fb3-0868-448a-b44e-bab6f8426bf8" /collection:http://servername:8080/tfs/DefaultCollection
Microsoft (R) TFSSecurity - Team Foundation Server Security Tool
Copyright (c) Microsoft Corporation. All rights reserved.
The target Team Foundation Server is http://servername:8080/tfs/defaultcollection.
Resolving identity "adm:vstfs:///Classification/TeamProject/df734fb3-0868-448a-b44e-bab6f8426bf8"...
a [A] [projectname]\Project Administrators
Deleting the application group...
Error: Access Denied: Administrator needs the following permission(s) to perform
this action: Edit project-level information
How should I get this permission if I can't add myself to the Administrators group?