VCS Commands
The VCS Integration feature requires that the VCS client be installed on the Integration Server host machine and connected to the VCS server. When a VCS command is applied to a package, folder, or element in the Package Navigator view in Designer, the VCS Integration feature passes a command to the VCS client for each underlying file contained in the selected item. This command contains the VCS user credentials. After the command is received by the VCS client, the VCS client transmits it to the VCS server using the security methods inherent to the VCS client and VCS server. An Integration Server user who has permission to run the VCS client can also connect to the VCS repository directly through the VCS client software.
Permission to run the VCS client software is required for each Integration Server user who will work with the VCS Integration feature. Consider prohibiting Integration Server users who do not need to access the VCS repository from running the VCS client. You should also limit VCS users to the minimum file permissions and system rights required to carry out the work assigned to those users.