Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Overlapping Model and Member Permissions (Master Data Services)

Permission assigned to a member can overlap with permission assigned to a model object. When overlaps occur, the more restrictive permission takes effect.

If a member has permission that is different than its corresponding model object, the following rules apply:

  • Deny overrides all other permissions.

  • Read-only overrides Update.

The following image shows which permissions take effect on an individual attribute value when attribute permissions are different than member permissions.

Overlapping hierarchy member permissions
Overlapping permissions example

On the Models tab, the Product entity has Update permission assigned. All attributes in the entity inherit that permission.

On the Hierarchy Members tab, the Mountain Bikes subcategory node in a derived hierarchy has Update permission assigned.

Result: In Explorer, the user has Update permission to all attribute values for all members in the Mountain Bikes node. All other members and attributes are hidden.

Overlapping permissions example
Overlapping permissions example

On the Models tab, the Subcategory attribute has Update permission assigned.

On the Hierarchy Members tab, the Mountain Bikes subcategory node in a derived hierarchy is explicitly assigned Read-only permission.

Result: In Explorer, the user has Read-only permission to the Subcategory attribute values for the members in the Mountain Bikes node. All other members and attributes are hidden.

Overlapping permissions example
Overlapping permissions example

On the Models tab, the Subcategory attribute has Read-only permission assigned.

On the Hierarchy Members tab, the Mountain Bikes subcategory in a derived hierarchy is explicitly assigned Update permission.

Result: In Explorer, the user has Read-only permission to the attribute values. All other members and attributes are hidden.

Overlapping permissions example

Content update

Added art to illustrate concepts and updated topic text accordingly.

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft. All rights reserved.