nerdexam
Microsoft

DP-600 · Question #20

You plan to deploy Microsoft Power BI items by using Fabric deployment pipelines. You have a deployment pipeline that contains three stages named Development, Test, and Production. A workspace is assi

The correct answer is A. Build permission to the production semantic models D. Viewer access to the Production workspace E. Contributor access to the Development and Test workspaces. To enable deployment to Development and Test but prevent it for Production, developers need Contributor access to Dev/Test workspaces, Viewer access to Production, and Build permission to production semantic models.

Submitted by tom_us· Apr 18, 2026Plan, implement, and manage a solution for data analytics

Question

You plan to deploy Microsoft Power BI items by using Fabric deployment pipelines. You have a deployment pipeline that contains three stages named Development, Test, and Production. A workspace is assigned to each stage. You need to provide Power BI developers with access to the pipeline. The solution must meet the following requirements:

  • Ensure that the developers can deploy items to the workspaces for

Development and Test.

  • Prevent the developers from deploying items to the workspace for

Production.

  • Follow the principle of least privilege.

Which three levels of access should you assign to the developers? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

Options

  • ABuild permission to the production semantic models
  • BAdmin access to the deployment pipeline
  • CViewer access to the Development and Test workspaces
  • DViewer access to the Production workspace
  • EContributor access to the Development and Test workspaces
  • FContributor access to the Production workspace

How the community answered

(29 responses)
  • A
    55% (16)
  • B
    28% (8)
  • C
    3% (1)
  • F
    14% (4)

Why each option

To enable deployment to Development and Test but prevent it for Production, developers need Contributor access to Dev/Test workspaces, Viewer access to Production, and Build permission to production semantic models.

ABuild permission to the production semantic modelsCorrect

Granting Build permission to the production semantic models allows developers to create reports and connect to these models from lower environments without having deployment rights to the production workspace itself.

BAdmin access to the deployment pipeline

Admin access to the deployment pipeline would grant permissions to deploy to all stages, including Production, which violates the requirement to prevent deployment to production.

CViewer access to the Development and Test workspaces
DViewer access to the Production workspaceCorrect

Assigning Viewer access to the Production workspace allows developers to see items in production but prevents them from deploying or modifying content, meeting the least privilege requirement.

EContributor access to the Development and Test workspacesCorrect

Contributor access to the Development and Test workspaces allows developers to publish, modify, and deploy items within these non-production stages, fulfilling the requirement for deployment capability there.

FContributor access to the Production workspace

Concept tested: Fabric deployment pipelines access control

Source: https://learn.microsoft.com/en-us/power-bi/create-reports/deployment-pipelines-access-permissions

Topics

#Fabric deployment pipelines#Power BI security#Role-based access control (RBAC)#Least privilege

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-600 Practice