Symptoms
Assume that you log on to Master Data Services (MDS) via a browser in SQL Server 2017 to edit user permissions in an entity. When the user is given Read and Create permission in the entity, the user must be able to insert in the field but not update. However, in this scenario you will notice that the user cannot insert.
Resolution
This issue is fixed in the following cumulative update for SQL Server:
Cumulative Update 12 for SQL Server 2017
About cumulative updates for SQL Server:
Each new cumulative update for SQL Server contains all the hotfixes and all the security fixes that were included with the previous cumulative update. Check out the latest cumulative updates for SQL Server:
Latest cumulative update for SQL Server 2017
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.