[Service Account] Service account for Team Foundation Server Log on as a service on the application-tier server Farm Administrators group for any SharePoint Web applications that Team Foundation Server uses1 TFSExecRole, or if this role does not exist for the database, a combination of the following roles for any databases that Team Foundation Server uses: db_owner db_create [Notes] This service account is used for all of the Web services for Team Foundation Server. If you use a domain account for this account, it must be a member of a domain that all computers throughout the deployment fully trust.
TFSService, which can be a local account, a domain account, Local Service in a workgroup, or Network Service in a domain