Best practice for Agent Queue Users in TFS 2015?

问题:

I have installed Team Foundation Server (TFS) 2015 with update 3 in some sandbox and test environments. In each environment I have to manually add users to the Agent Queue Users group to make it possible for any user to start a build.

Ahmed Al-Asaad has blogged about how to do just that here.

I have failed to find any Microsoft documentation that describes who should be members of the Agent Queue Users group and it baffles me why the group is empty. The closest documentation I've found is this but it just states that I can add users to the group.

It seems counterintuitive that no user per default is allowed to queue a build. That is one of the main reasons for installing TFS in the first place. I want my users to check-in and build all the time.

It also confuses me that I have to add users to the group completely separated from the security administration of the Team Project(s) the user is a member of.

Can anybody point me to some description of best practice on this topic?

Cheers Michael

回答1:

By default your Build Administrators are given the Administrator role in your agent queues. If you want other people to also be permitted to use the queue, you'll need to add them.

The best practice is to add a group (for example, {your-project}\Contributors) to Agent Queue Users. If you want your users can access all agent queues, you can select All Queues and then add the group {your-project}\Contributors to Agent Queue Users group. If you only want these users to access a particular agent queue, then add the group {your-project}\Contributors to the Agent Queue Users group of the particular agent queue.