Only a Fabric admin can create top-level domains; domain admin handles subdomains
Your company has a sales department that uses two Fabric workspaces named Workspace1 and Workspace2. The company decides to implement a domain strategy to organize the workspaces. You need to ensure that a user can perform the following tasks: Create a new domain for the sales department. Create two subdomains: one for the east region and one for the west region. Assign Workspace1 to the east region subdomain. Assign Workspace2 to the west region subdomain. The solution must follow the principle of least privilege. Which role should you assign to the user?
Community Votes
84% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Domain creation is a Fabric-admin-only capability; the principle of least privilege here still requires Fabric admin because no lower role can create a domain at all.
Creating a new top-level domain in Microsoft Fabric requires the Fabric admin role. A domain admin can create and manage subdomains and assign workspaces within an existing domain, but cannot create the parent domain itself.
Assigning domain admin and assuming it covers creating the top-level domain; domain admin authority begins after a Fabric admin creates the domain.
Community Discussion (10 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.