Microsoft’s Master Data Services (MDS) security architecture allows for the flexible implementation of application, model, entity, attribute and member level security.
For a particular user/group, the easiest way to begin applying security is to first set the entire model to read-only. Then, the aspects of the model that are allowed to be changed, are set to ‘Update’.
A group of users is responsible for maintaining Unit Prices of products within MDS. Nightly processing provides the updates to the Product and Brand entities, except for the ‘Unit Price’ attribute.
Within the ‘User and Group Permissions’ area, select the user/group to be modified and choose ‘Models’.
Initially, set the ‘Products’ model to ‘Read-only’.
Then, unlock the ‘Unit Price’ attribute, by navigating to the Leaf Attribute and select ‘Update’.
The ‘Model Permission Summary’ defines the effective permissions for the user/group.
When, the relevant user logs in and opens the Product entity, attributes that are read-only appear in grey cells. Those in white can be updated, ie. Unit Price.