locked
Create Non-Active directory Group in Master Data Services RRS feed

  • Question

  • In Master data services, when we want to create a usergroup which is not a Active directory security group. In +EDM, it was possible. We are migrating security from +EDM to MDS. Is there a setting through which we can implement usergroup which is local to MDS. There is a column called "SecurityMode". But, it is not being used. Please clarify whether there is another way to implement this.


    Venkataraman R
    Tuesday, July 19, 2011 3:45 AM

Answers

  • Hi Venkataraman,

    The local group or application group within +EDM was not considered good security practice by Microsoft.  The alternative in MDS is to create local Windows groups on the machine where MDS is hosted.  This is possible without access to Active Directory.

    Regards,

    Val Lovicz, Profisee

    • Proposed as answer by Val Lovicz Thursday, July 21, 2011 1:49 PM
    • Marked as answer by Venkataraman R Thursday, July 21, 2011 2:51 PM
    Thursday, July 21, 2011 1:49 PM

All replies

  • Hi Venkataraman,

    The local group or application group within +EDM was not considered good security practice by Microsoft.  The alternative in MDS is to create local Windows groups on the machine where MDS is hosted.  This is possible without access to Active Directory.

    Regards,

    Val Lovicz, Profisee

    • Proposed as answer by Val Lovicz Thursday, July 21, 2011 1:49 PM
    • Marked as answer by Venkataraman R Thursday, July 21, 2011 2:51 PM
    Thursday, July 21, 2011 1:49 PM
  • Thanks Val for the reply. Even though Local groups are allowed, Moving the MDS application from one environement machine to another environment machine will require the creation of groups again in every environment machine. We would go ahead with creation of Active directory groups.
    Venkataraman R
    Thursday, July 21, 2011 2:50 PM