The old build permissions model for build resources was flat, meaning you could grant someone permission to manage all or no build resources. In the new build system, the security is a proper hierarchy, so you can control permissions on a queue-by-queue or pool-by-pool basis. The build system provides a "role-based access control" instead of exposing the underlying permissions directly. In this recipe, you'll learn how to permission build resources at the pool and queue levels.
Scenario: To manage the all pools membership, you need to be a member of the Team Foundation Administrators Group. Membership to Team Project Collection Administrator Group is required to manage permissions for individual pools. In order to manage the permissions for the queues, you need to be a member of the Project Collection Build Administrators Group. Build Definition Administration requires membership to the Build Administrators Group.