1. Proposed AD groups for TFS Users

2. TFS-<Collection>-CollectionAdministartors
TFS-<Collection>-CollectionBuildAdministrators
TFS-<Collection>-CollectionBuildServiceAccounts
TFS-<Collection>-<Project>-ProjectAdministrators
TFS-<Collection>-<Project>-ProjectBuildAdministrators
TFS-<Collection>-<Project>-<Queue>-QueueAdministrators
TFS-<Collection>-<Project>-<Queue>-QueueUsers
TFS-<Collection>-<Project>-<Team>-Code-Administrators
TFS-<Collection>-<Project>-<Team>-Code-Developers
TFS-<Collection>-<Project>-<Team>-Code-Contractors
TFS-<Collection>-<Project>-<Team>-Code-Readers
TFS-<Collection>-<Project>-<Team>-Board-Administrators
TFS-<Collection>-<Project>-<Team>-Board-Members
TFS-<Collection>-<Project>-<Team>-Release-PreDeployApprovers
TFS-<Collection>-<Project>-<Team>-Release-PostDeployApprovers
TFS-<Collection>-<Project>-<Team>-Release-EnvironmentOwners
TFS-<Collection>-<Project>-<Team>-Test-Testers

3. Collection Permission TFS-<Collection>-CollectionAdministartors
TFS-<Collection>-CollectionBuildAdministrators
TFS-<Collection>-CollectionBuildServiceAccounts
Administer build resource permissions
Allow
Administer Project Server integration
Not set
Administer shelved changes
Administer workspaces
Alter trace settings
Create a workspace
Inherited allow
Create new projects
Delete team project
Edit collection-level information
Make requests on behalf of others
Manage build resources
Manage process template
Manage test controllers
Trigger events
Use build resources
View build resources
View collection-level information
View system synchronization information

4. Project
Permission
TFS-<Collection>-<Project>-ProjectAdministrators
TFS-<Collection>-<Project>-ProjectBuildAdministrators
Create tag definition
Allow
Create test runs
Delete team project
Not set
Delete test runs
Delete work items in this project
Edit project-level information
Manage test configurations
Manage test environments
Permanently delete work items in this project
View project-level information
View test runs

5. Build/Release Queue Permission
TFS-<Collection>-<Project>-<Queue>-QueueAdministrators
TFS-<Collection>-<Project>-<Queue>-QueueUsers

6. Team - Code
Permission
TFS-<Collection>-<Project>-<Team>-Code-Administrators
TFS-<Collection>-<Project>-<Team>-Developers
TFS-<Collection>-<Project>-<Team>-Contractors
TFS-<Collection>-<Project>-<Team>-Readers
Administer labels
Allow
Deny
Not set
Check in
Check in other users' changes
Check out
Label
Lock
Manage branch
Manage permissions
Merge
Read
Revise other users' changes

7. Team - Board Permission
TFS-<Collection>-<Project>-<Team>-Board-Administrators
TFS-<Collection>-<Project>-<Team>-Board-Members
Create tag definition
Allow
Create test runs
Delete team project
Delete test runs
Delete work items in this project
Not set
Edit project-level information
Manage test configurations
Manage test environments
Permanently delete work items in this project
View project-level information
View test runs

8. Team – Board - Areas Permission
TFS-<Collection>-<Project>-<Team>-Board-Administrators
TFS-<Collection>-<Project>-<Team>-Board-Members
Create child nodes
Allow
Delete this node
Not set
Edit this node
Edit work items in this node
Manage test plans
Manage test suites
View permissions for this node
View work items in this node

9. Team – Board - Iterations
Permission
TFS-<Collection>-<Project>-<Team>-Board-Administrators
TFS-<Collection>-<Project>-<Team>-Board-Members
Create child nodes
Allow
Delete this node
Not set
Edit this node
View permissions for this node

10. Team - Release Permission
TFS-<Collection>-<Project>-<Team>-Release-PreDeployApprovers
TFS-<Collection>-<Project>-<Team>-Release-PostDeployApprovers
TFS-<Collection>-<Project>-<Team>-Release-EnvironmentOwners
Approve Pre-Deployment
yes
Approve Post-Deployment
Environment Owners

11. Team - Test
Permission
TFS-<Collection>-<Project>-<Team>-Test-Testers
Run Tests
yes