You need a TFS CAL for every person you have connected to a Team Foundation Server instance inside your organisation. If those people have a license for one of the Visual Studio Team System versions (Architect, Developer, Tester, Database Pro or the Suite) then that includes a TFS CAL so you do not need to purchase additional ones for them.
For more information see the TFS Licensing White Paper:-