You have a Fabric tenant that contains two workspaces named Workspace1 and Workspace2 and a...

User1 must be able to:

Create a new domain.

Create two subdomains.

Assign Workspace1 to subdomain1.

Assign Workspace2 to subdomain2.

Key Role Definitions in Fabric:

Domain admin: Can manage domain settings, add/remove workspaces, manage contributors.

Domain contributor: Can contribute to an existing domain but cannot create a domain.

Workspace admin: Only controls permissions/settings inside a workspace, not domains.

Fabric admin: Tenant-wide admin, broader than required.

Requirement: Follow least privilege.

To create a new domain → Requires Domain admin.

To assign workspaces to subdomains → Domain admin rights are sufficient.

Fabric admin is excessive and breaks least privilege.

Correct Answer:

A. Domain admin