(this post was contributed by Brian Barnett, Senior Software Engineer on the MDS Team)
In Part 1 you made the necessary model changes. In this post we will make the security changes necessary to meet the requirements of our workflow scenario.
Based on our scenario, we want to send out email notifications to several different types of users based on the product line they work with and their responsibility with that product line. The best way to implement this is by creating groups, setting the group permissions, and then assigning users to these groups.
The security model within MDS allows you to create very general to very granular access permissions on groups and users. MDS uses Windows integrated security - local and/or domain principals can be used. Therefore, the creation of users, groups, and user-group assignments is done outside of MDS. This needs to be done in either Active Directory or Server Manager (Configuration | Local Users and Groups). Within MDS, you simply select the local or domain users and groups that you desire to give access.
In our scenario we will only be adding groups, since that is how we are going to be managing permissions. We will be setting up the following groups and permissions. You will need at least one user assigned to each group. Again, this user-group assignment must be done outside of MDS.
The Functions , Models , and Hierarchy Members bullet points below correlate to tabs on the Group security page.
Here are the five groups we will be adding.MDS Product Administrator
I’ll walk through creating one group here and will leave the rest as an exercise for you. Before you begin, ensure the users and groups exist in Active Directory and/or your local server.
In Master Data Manager, click User and Group Permissions.
Now that the groups have been added to MDS, let’s walk through setting permissions for one of them.
Below are what the Models and Hierarchy Members tabs should look like.
Follow similar steps as above to set permissions for the other groups.
In Part 3 we will configure MDS to send out email notifications
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.