Users and Groups (Master Data Services)
To access the Master Data Manager Web application a user must have a Windows domain account or an account on the server computer where Master Data Services is installed. To grant access to Master Data Manager you can either:
Add the user account to a domain or local group and add the group to the list of groups in Master Data Manager.
Add the user account to the list of users in Master Data Manager.
Note
When a user belongs to a group that has access to Master Data Manager, the user's name is automatically added to the list of users the first time the user accesses Master Data Manager.
To take action within the Explorer functional area of the UI, the group or user must be assigned access to the Explorer functional area and assigned permission to model objects.
If a user or group needs access to other functional areas, the user or group must be an administrator. For more information, see Administrators (Master Data Services).
Best Practice
To simplify administration, create groups and assign each group permission to functional areas and model objects. You can then add and remove users from the groups without accessing the Master Data Manager UI.
Do not assign additional permissions to an individual user, and do not include a user in multiple groups that have access to Master Data Manager. In addition, do not use hierarchy member permissions unless you want a group to have limited access to specific members.
Authentication
When a user attempts to access the Master Data Manager URL, the user's credentials are authenticated. For more information about supported authentication types, see Authentication in Master Data Services (Master Data Services).
In Internet Explorer, security settings control whether this occurs automatically or if the user must enter a user name and password. To change these settings, complete the following steps:
In Internet Explorer 7 and later, click Tools, Internet Options, and then click the Security tab.
Click Local Intranet and then the Custom Level button.
In the User Authentication section, choose the setting you want. For more information about these settings, see Setting Up Security Zones, User Authentication in the MSDN Library.