DP-600 · Question #140
You have a Fabric tenant that contains two workspaces named Workspace1 and Workspace2 and a user named User1. You need to ensure that User1 can perform the following tasks: - Create a new domain…
The correct answer is C. Fabric admin. In Microsoft Fabric, creating a new domain is a privileged action reserved for Fabric administrators. Domain admins can manage an existing domain (create subdomains, assign workspaces) but cannot create the domain itself. Domain contributors have even more limited rights…
Question
You have a Fabric tenant that contains two workspaces named Workspace1 and Workspace2 and a user named User1. You need to ensure that User1 can perform the following tasks:
- Create a new domain.
- Create two subdomains named subdomain1 and subdomain2.
- Assign Workspace1 to subdomain1.
- Assign Workspace2 to subdomain2.
The solution must follow the principle of least privilege. Which role should you assign to User1?
Options
- Adomain admin
- Bdomain contributor
- CFabric admin
- Dworkspace Admin
How the community answered
(61 responses)- A11% (7)
- B3% (2)
- C79% (48)
- D7% (4)
Explanation
In Microsoft Fabric, creating a new domain is a privileged action reserved for Fabric administrators. Domain admins can manage an existing domain (create subdomains, assign workspaces) but cannot create the domain itself. Domain contributors have even more limited rights. Workspace Admin only governs a specific workspace. Since User1 must create the domain first, the minimum required role is Fabric admin - making it both the correct role and the least-privileged role that satisfies all the stated requirements.
Topics
Community Discussion
No community discussion yet for this question.