The APIs are enhanced to support MDM Hub user roles. In all cases, a user must have permission to read a record before the other permissions are processed. The user role permissions are inherited by the business entity, and then the field filters can be used to restrict access to records based on the value in a field.
The following REST APIs return the user role privileges in the <operations> element for objects and relationships:
GetMetadata
ListMetadata
For information about how security enhancements affect