Handling security in TFS is quite complex and requires understating of the various parts of the platform pops-up a lot of questions. In this document we will go through most of security and permissions issues: Server and project groups, permissions granting in: source control, portal, reporting services, work item and team build. We will also recommend a mixture of permissions that match common roles. Finally, we will go over three permissions tools: tf, TFSecuriry and TFSAdmin.