TFS grant permissions to only one Branch

I was asked to grant permissions to several TFS users.

These users must have access to one branch only. How can I do this?

I'm going to create new TFS user group and deny access to root of Source Control, then allow access to necessar开发者_如何学JAVAy branch. What do you think?

That is the correct approach.

It doesn't work. Because Deny permission has higher priority than Allow even Deny even if it exist on parent. Deny permission always override Allow permissions. If you are using TFVC as source control, you could set the permission of root to "Not Set" and in then set "Allow" access to the branch you needed. Remember that in GitVC it's a little diffrent.