Set up: Set Permissions Work Item
The "Agile" template says that you should add Team Members to one of the four security groups: Build Services, Project Administrators, Contributors, or Readers. Technically you shouldn't add Team Members to Build Services because this group is for service accounts only.