Question
Your company has a sales department that uses two Fabric workspaces named Workspace1 and Workspace2.
The company decides to implement a domain strategy to organize the workspaces.
You need to ensure that a user can perform the following tasks:
- Create a new domain for the sales department.
- Create two subdomains: one for the east region and one for the west region.
- Assign Workspace1 to the east region subdomain.
- Assign Workspace2 to the west region subdomain.
The solution must follow the principle of least privilege.
Which role should you assign to the user?
- A. workspace Admin
- B. domain admin
- C. domain contributor
- D. Fabric admin Correct
Explanation
Only a Fabric admin can create a domain, so the first task already requires the Fabric admin role; a Fabric admin can also create subdomains and assign workspaces to them. A domain admin can create subdomains and assign workspaces but cannot create a new domain, and a domain contributor or workspace Admin can only assign workspaces they administer. Fabric admin is therefore the least privileged role that covers every task.
