Role is a set of permissions granted to a particular user account. A permission is an authorization granted to TeamCity users to perform particular operations.
Roles are assigned by the administrator on a per-project basis - a user can have different roles in different projects, and hence, the permissions are project-based. A user can have a role in a specific project or in all available projects, or no role at all. Depending on your TeamCity edition, different roles are available. You can associate a user account with a set of roles in the Assign roles dialog.
This section describes:
TeamCity Enterprise Edition User Roles
 | The roles and permissions are described and can be modified in the roles-config.xml file stored in <TeamCity Data Directory>/config directory. When assigning roles, the view role permissions link in the web UI displays a list of permissions for each role in accordance with how they have been manually re-configured. |
| Role |
Description and Permissions
|
| System Administrator |
TeamCity System Administrators have no restrictions in their permissions, and have all of the project administrator's permissions. They can create and manage users accounts, authorize build agents and set up projects and build configurations, edit the TeamCity server settings, manage TeamCity licenses, configure server data cleanup rules, change shared VCS roots, and etc. |
| Project Administrator |
Project Administrator is a person who can customize the general settings of a project, build configuration settings and assign roles to the project users and has all the project developer's and agent manager's permissions. |
| Project Developer |
Project Developer is a person who usually commits changes to a project. He can start/stop builds, reorder builds in the build queue, label the build sources, review agent details, take responsibility for the failed build. |
| Agent Manager |
Agent Manager is a person responsible for customizing and managing the Build Agents; he or she can change the run configuration policy and enable/disable build agents. |
| Project Viewer |
A Project Viewer has only read-only access for the projects the role is assigned to and can only view the project. Project Viewer role does not have permissions to view agent details. |
| Guest |
Guest users can view projects and their build configurations and do not need any registration to access TeamCity. Guest users cannot access start new builds and stop running builds, monitoring the status of changes integration on My Changes page, configure notification rules and receive any notifications, review build agents details.
 | This role suits well for a non-committer who just monitors the projects status on the Projects page. |
Any number of users can be logged in to TeamCity simultaneously as guests. For additional information please refer to Enabling Guest Login. |
TeamCity Professional Edition User Roles
 | The user roles in the TeamCity Professional Edition are not configurable and fixed in all projects, and you cannot add or remove a permission from a role. |
| Role |
Description
|
| Administrator |
TeamCity Administrators have no limitations in their permissions. They have access to all the projects, create users accounts, manage server licenses and set up projects and build configurations. |
| User |
Common users correspond to "Project Developer" for all projects in the Enterprise edition. Users cannot create and edit projects and build configurations. |
Guest
|
Guest users can view projects and their build configurations and do not need any registration to access TeamCity. Guest users cannot access start new builds and stop running builds, monitoring the status of changes integration on My Changes page, configure notification rules and receive any notifications, review build agents details.
| This role suits well for a non-committer who just monitors the projects status on the Projects page. |
Any number of users can be logged in to TeamCity simultaneously as guests. For additional information please refer to Enabling Guest Login. |
See Also: