One question I get quite often is how you can control access to the Team System Web Access client.
TSWA will use the permissions setup for a user in TFS. So if you're allowed to view reports or manage documents in Sharepoint then these features will be available to you in TSWA as well.
Now, in TSWA 2008 there is also a way to control which tabs a user is allowed to use. To setup access permissions, chose "Settings, Team Project, Access Restrictions" in the web client. A dialog like the one below is shown where you can configure permissions in TSWA similar to the rest of TFS.
When Nicole in the case above logs in to TSWA the UI will not allow her to work with the reports, source control or build tabs. Not bad but in my opinion it would have been even better if the tabs wasn't shown at all.