Team Foundation Server Error TF14044: Access Denied

One of my new developers got an error today when trying to use Microsoft Team Foundation Server (TFS) for the first time. Trying to open the Source Control Explorer for a project gave them the following dialog:

If they clicked Yes, then they received the error message TF14044: Access Denied: User XXX needs the CREATE_PROJECTS global permission(s).

Now their account looked fine in TFS and I confirmed it with the TFS Administration Tool. The problem was the actual security defined in Source Control.

To solve the problem, I opened Source Control Explorer on my machine, right-clicked on the project in question and clicked Properties. The Security tab only had two Users and Groups, namely the [SERVER]\Service Accounts and [SERVER]\Team Foundation Administrators.

Basically it was missing the project level security groups and the associated rights. If you want to add these manually then add the following groups and rights:

[Project]\Build Services - Read, Check Out, Check In, Label, Lock

[Project]\Contributors - Read, Check Out, Check In, Label, Lock

[Project]\Project Administrators - All Permissions

[Project]\Readers - Read

Hope this helps someone else with the same problem.