Users with default Project Developer and Project Administrator roles can't see unauthorized agents

Symptoms

1. TeamCity was updated from a version prior to 2024.12 to version >=2024.12.
2. Users with the default Project Developer and Project Administrator roles can no longer see unauthorized build agents.
3. They were able to view them before the update.

Cause

It is expected behavior.

Prior to TeamCity 2024.12, the default Project Developer role had the VIEW_AGENT_DETAILS permission, meaning they could see the details of any agent connected to the server. This permission was removed from this role in 2024.12. It was replaced with a new permission that makes this role see only the agents associated with their projects. This, however, prevents them from seeing unauthorized agents.

By default, only the Agent Manager and System Administrator roles can see unauthorized agents.

Resolution

If it is required to allow users with default Project Developer and/or Project Administrator roles to see unauthorized agents, the VIEW_AGENT_DETAILS permission should be added to the roles that need it.

Additional information

• Permissions required to see unauthorized build agents
• TW-85841 (internal reference only)