To access the Master Data Manager web application a user must have a Windows domain account or an account on the server computer where Master Data Services is installed. To grant access to Master Data Manager you can either:
Add the user account to a domain or local group and then add the group to the list of groups in Master Data Manager.
Add the user account to the list of users in Master Data Manager.
When a user belongs to a group that has access to Master Data Manager, the user's name is automatically added to the list of users the first time the user accesses Master Data Manager or the MDS Add-in for Excel.
To take action within the Explorer functional area of the UI, the group or user must be assigned access to the Explorer functional area and assigned permission to model objects.
If a user or group needs access to other functional areas, the user or group must be assigned access to the specific functional area.
To simplify administration, create groups and assign each group permission to functional areas and model objects. You can then add and remove users from the groups without accessing the Master Data Manager UI.
Do not assign additional permissions to an individual user, and do not include a user in multiple groups that have access to Master Data Manager. In addition, do not use hierarchy member permissions unless you want a group to have limited access to specific members.