| title | Users and Groups | ||||
|---|---|---|---|---|---|
| ms.custom | |||||
| ms.date | 03/01/2017 | ||||
| ms.prod | sql | ||||
| ms.prod_service | mds | ||||
| ms.reviewer | |||||
| ms.technology | master-data-services | ||||
| ms.topic | conceptual | ||||
| helpviewer_keywords |
|
||||
| ms.assetid | ed08dd2d-248e-4b68-91d4-e9961cb50eed | ||||
| author | lrtoyou1223 | ||||
| ms.author | lle |
[!INCLUDEappliesto-ss-xxxx-xxxx-xxx-md-winonly]
To access the [!INCLUDEssMDSmdm] web application a user must have a Windows domain account or an account on the server computer where [!INCLUDEssMDSshort] is installed. To grant access to [!INCLUDEssMDSmdm] you can either:
-
Add the user account to a domain or local group and then add the group to the list of groups in [!INCLUDEssMDSmdm].
-
Add the user account to the list of users in [!INCLUDEssMDSmdm].
[!NOTE]
When a user belongs to a group that has access to [!INCLUDEssMDSmdm], the user's name is automatically added to the list of users the first time the user accesses [!INCLUDEssMDSmdm] or the MDS [!INCLUDEssMDSXLS].
To take action within the Explorer functional area of the UI, the group or user must be assigned access to the Explorer functional area and assigned permission to model objects.
If a user or group needs access to other functional areas, the user or group must be assigned access to the specific functional area.
To simplify administration, create groups and assign each group permission to functional areas and model objects. You can then add and remove users from the groups without accessing the [!INCLUDEssMDSmdm] UI.
Do not assign additional permissions to an individual user, and do not include a user in multiple groups that have access to [!INCLUDEssMDSmdm]. In addition, do not use hierarchy member permissions unless you want a group to have limited access to specific members.
Add a User (Master Data Services)
Add a Group (Master Data Services)
Delete Users or Groups (Master Data Services)
Test a User's Permissions (Master Data Services)