Inviting users to a feed
After creating a MyGet feed (repository), we can invite other users to it. Depending on the assigned privileges, others can then contribute to development of packages on the feed or simply consume packages.
MyGet features a rich security model around your feeds. As a feed owner, we always have the richest set of permissions possible. We can assign privileges to specific users on MyGet using their email address or username.
Inviting other users to your feed
In order to give other users a certain privilege on your feed, they have to be invited to your MyGet feed. This can be done in the Feed security tab for our feed. This tab lists all users that currently have access to our feed as well as a list of "pending" invitations, that is: users that have been invited to our feed but haven’t confirmed yet.
The Add feed privileges... button will open a dialog and allows us to invite a user to your feed by entering his e-mail address. You can immediately assign the correct privilege to this user to ensure the correct privilege will be assigned once the user confirms the invitation.
If the user exists on MyGet, privileges are assigned immediately. If the user has no MyGet account, an invitation e-mail will be sent to the e-mail address provided. When the invitation is accepted, the user will be granted access to our feed with the privileges chosen in the Add feed privileges dialog.
Managing user permissions
After inviting a user to our feed, wecan change the privileges previously assigned. For example, a user who could previously only consume packages may now be granted the privilege of contributing packages to our feed. Also, a user who could previously manage all packages on the feed can be locked down into a privilege where they can only consume packages and no longer manage them.
The Feed security tab for our feed lists all users that currently have access to your feed, as well as a list of users that have been invited to our feed but haven't confirmed their privileges yet. The dropdown next to a user's name allows us to modify the currently assigned privilege.
Note: When assigning the "Has no access to this feed" privilege to a certain user, the user will be removed from our feed.
Available feed privileges
Permissions on a MyGet feed can be granted to other users. The table below lists all possible permissions and their meaning:
| Permission | Description | MyGet account required? |
|---|---|---|
| Has no access to the feed | The user is denied access to the feed and cannot perform any operations on it. | no |
| Can consume this feed | The user can search and consume packages but pushing packages is not allowed. | no |
| Can contribute own packages to this feed | The user can search, consume and push packages to the feed. Users with this privilege will only be able to manage their own packages. This security setting is identical to the security settings on the official NuGet package source, and the default security setting for a MyGet Community feed. |
yes |
| Can manage all packages for this feed | The user can search, consume and push packages to the feed as well as use the MyGet website to manage packages. | yes |
| Can manage users and all packages for this feed | The user becomes a co-owner of the feed and can search, consume and push packages to the feed as well as use the MyGet web site to manage packages and users. The privilege is essentially the same as being a feed owner except that deleting a feed isn't allowed. | yes |
| Owns the feed | The user owns the feed and can perform all operations on it. The user manage feed settings, packages and user privileges. For private feeds, the feed owner must have an active, paid MyGet subscription. | yes |
Feed ownership and co-owners
A MyGet feed is always owned by a user account. Other users can be assigned co-owner privileges, allowing them to manage feed settings, packages and user privileges.
Before changing feed ownership, consider the following:
- If the goal is to assign permissions to a user that allow managing feed, packages and users, select the
Can manage users and all packages for this feedprivilege. - If the goal is to transfer feed ownership, assign the
Owns the feedprivilege.
Feed ownership can be changed from the feed's Feed Security tab.
Warning! For private feeds, the feed owner must have an active, paid MyGet subscription. If the user does not have an active, paid subscripton, the feed will become locked and can only be unlocked by contacting support. Always be careful when assigning the Owns the feed permission - very often Can manage users and all packages for this feed is intended.