Model Permissions (Master Data Services)
Applies to: 
SQL Server - Windows only
Azure SQL Managed Instance
Model permissions apply to all entities, derived hierarchies, explicit hierarchies, and collections that exist within the model. Permissions assigned to the model can be overridden for any individual object.
Note
If a user is a model administrator, the model is displayed in all functional areas of the user interface. Otherwise, the model is displayed in the Explorer functional area only. For more information, see Administrators (Master Data Services).
| Permission | Description |
|---|---|
| Read | User can read members, attributes, hierarchy memberships, or collection memberships. |
| Create | User can create members, and assign attribute values during create. |
| Update | User can update members, attributes, hierarchy memberships, or collection memberships. |
| Delete | User can delete members |
| Deny | Deny all access to the model |
| Admin | Administrator permission on the model. Admin permission is only available at the model level. |
The Read, Create, Update, and Delete permissions can be combined with each other. When Create, Update and Delete permissions are assigned, the read permission will be assigned automatically.
See Also
Assign Model Object Permissions (Master Data Services)
Model Object Permissions (Master Data Services)
Entity Permissions (Master Data Services)
Collection Permissions (Master Data Services)