Question
You plan to deploy Microsoft Power BI items by using Fabric deployment pipelines. You have a deployment pipeline that contains three stages named Development, Test, and Production. A workspace is assigned to each stage.
You need to provide Power BI developers with access to the pipeline. The solution must meet the following requirements:
- Ensure that the developers can deploy items to the workspaces for Development and Test.
- Prevent the developers from deploying items to the workspace for Production.
- Follow the principle of least privilege.
Which three levels of access should you assign to the developers? Each correct answer presents part of the solution.
- A. Build permission to the production semantic models
- B. Admin access to the deployment pipeline Correct
- C. Viewer access to the Development and Test workspaces
- D. Viewer access to the Production workspace Correct
- E. Contributor access to the Development and Test workspaces Correct
- F. Contributor access to the Production workspace
Explanation
Pipeline admin is the only deployment pipeline permission and is required for every pipeline operation, including deploying. Deploying items requires at least the Contributor role in both the source and target workspaces, so Contributor on Development and Test lets developers deploy between them. Viewer on Production lets them see that stage but not deploy to it, because the target workspace needs Contributor or higher. Viewer on Development and Test would block deployment, Contributor on Production would allow it, and Build permission is not a deployment permission.
