It's all about the answers!

Ask a question

Modify the collection of team members

He Huang (31911) | asked Sep 11 '13, 11:14 p.m.
A person is the Scrum Master in Project Area, and is also the Scrum Master in Team Area which belongs to the Project Area.
In Project Area, the Scrum Master role does not have the permission to "Modify the collection of team members".
In Team Area, the Scrum Master role does not override the same role in Project Area, i.e. also does not have the permission to "Modify the collection of team members".

In Project Area, this person cannot change the role of all members. This behavior is correct.
However in Team Area, this person can change the role of all members. Why?

3 answers

permanent link
Ralph Schoon (63.3k33646) | answered Sep 12 '13, 5:10 a.m.
I can't tell why this happens from your description, please be aware that any user also has the role "Everyone" and permissions accumulate. In general this article describes how permissions work: and permissions can also be set on the temporal dimension.

permanent link
Simon Eickel (1.1k75457) | answered Sep 12 '13, 9:52 a.m.
Hi He,
when reading your post I assume this:
you have a project area PA which has one child team Area CTA.
One person is in both, PA and CTA, a team member with role "Scrum Master" correct?
The role "Scrum Master" is defined to have different permission on PA and CTA ... correct?

Everytime you have a person in different teams / sub teams the first role which is fitting is the last one means the one of the team he is trying to do something.
The result is that this person is doing something within CTA the permission he has within this team is used and not the one of the team (PA) above.
The Scrum Master role of CTA has more permissions as the Scrum Master role of PA then the user is allowed to do more within CTA.

Permisisons of the parent teams do not override the permissions of the same role within a child team area.

Permissions are granted additivly.

Hope this helps,

permanent link
Chris Goldthorpe (4287) | answered Sep 12 '13, 12:53 p.m.
If the team member is also an administrator of that team area then he would be able to add members even if his roles did not grant that permission. Also a user with repository permission of JazzAdmin or JazzProjectAdmin can always add team members.

He Huang commented Sep 13 '13, 5:57 a.m.

How to find out whether a person is the administrator of a team area?

Chris Goldthorpe commented Sep 13 '13, 12:59 p.m.

You can find the list of administrators from the team area editor as follows

He Huang commented Sep 15 '13, 10:31 p.m.

Strange, no body in the Administrator list of this team area.

Chris Goldthorpe commented Sep 16 '13, 5:31 p.m.

There is one more thing you can use to get more information -  if a user is logged in using the Eclipse Client the Team Advisor View will show when an operation fails due to lack of permission. In the example below the user did not have permission to modify the collection of team members, which is why the Permission Denied is shown. The user had a repository role of JazzAdmin so the save succeeded anyway which is why Administrative Override is shown.

Your answer

Register or to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.