Share via


Database Object Security (Master Data Services)

In the Master Data Services database, data is stored in multiple database tables and is visible in views. Information that you might have secured in the Master Data Manager Web application is visible to users with access to the Master Data Services database.

Specifically, employee salary information might be contained in an Employee model, or company financial information might be in an Account model. You can deny a user access to these models in the Master Data Manager user interface, but users with access to the database can view this data.

You can grant permissions to database objects to make specific data available to users. For more information on granting permissions, see GRANT Object Permissions (Transact-SQL). For more information about securing SQL server, see Securing SQL Server.

The following tasks require access to the Master Data Services database:

  • Staging Data

  • Validating Data Against Business Rules

  • Deleting Versions

  • Immediately Applying Hierarchy Member Permissions

  • Changing the System Administrator Account

  • Configuring System Settings

Staging Data

In the following table, each securable has “name” as part of the name. This indicates the name of the staging table that is specified when an entity is created. For more information, see Importing Data (Master Data Services)

Action

Securables

Permissions

Load leaf members and their attributes into the staging table.

stg.name_Leaf

Required: INSERT

Optional: SELECT and UPDATE

Load the data from the Leaf staging table into the appropriate MDS database tables.

stg.udp_name_Leaf

EXECUTE

Load consolidated members and their attributes into the staging table.

stg.name_Consolidated

Required: INSERT

Optional: SELECT and UPDATE

Load the data from the Consolidated staging table into the appropriate MDS database tables.

stg.udp_name_Consolidated

EXECUTE

Load leaf and consolidated members’ relationships to each other in an explicit hierarchy into the staging table.

stg.name_Relationship

Required: INSERT

Optional: SELECT and UPDATE

Load the data from the Relationship staging table into the appropriate MDS tables.

stg.udp_name_Relationship

EXECUTE

View errors that occurred when data from the staging tables was being inserted into the MDS database tables.

stg.udp_name_Relationship

SELECT

For more information, see Importing Data (Master Data Services).

Validating Data Against Business Rules

Action

Securable

Permissions

Validate a version of data against business rules

mdm.udpValidateModel

EXECUTE

For more information, see Validation Stored Procedure (Master Data Services).

Deleting Versions

Action

Securables

Permissions

Determine the ID of the version you want to delete

mdm.viw_SYSTEM_SCHEMA_VERSION

SELECT

Delete a version of a model

mdm.udpVersionDelete

EXECUTE

For more information, see Delete a Version (Master Data Services).

Immediately Applying Hierarchy Member Permissions

Action

Securables

Permissions

Immediately apply member permissions

mdm.udpSecurityMemberProcessRebuildModel

EXECUTE

For more information, see Immediately Apply Member Permissions (Master Data Services).

Changing the System Administrator Account

Action

Securables

Permissions

Determine the SID of the new administrator

mdm.tblUser

SELECT

Change the system administrator account

mdm.udpSecuritySetAdministrator

EXECUTE

For more information, see Change the System Administrator Account (Master Data Services).

Configuring System Settings

There are system settings that you can configure to control behavior in Master Data Services. You can adjust these settings in Master Data Services Configuration Manager or if you have UPDATE access, you can adjust these settings directly in the mdm.tblSystemSetting database table. For more information, see System Settings (Master Data Services).

See Also

Concepts

Security (Master Data Services)