Member role balances invite rights with least privilege for the Sales group

PL-300 By islever Editorial Last updated Sep 25, 2026

Secure and govern Power BI items

Short answer

B Member is the lowest workspace role that grants both access and the right to invite others.

Question

You create a Power BI workspace named Workspace1. You publish a semantic model and a report to Workspace1. You need to configure Workspace1 to meet the following requirements: • Provide access to a group named Sales. • Ensure that Sales can invite other users to Workspace1. • Follow the principle of least privilege. Which role should you assign to Sales?

Contributor
Member Correct Answer
Admin
Viewer

Key Takeaways

Contributor can build content but not manage permissions; Member is the lowest workspace role that can invite others and manage access — the least privilege that still satisfies the invite requirement.

Workspace1 must give the Sales group access plus the ability to invite other users, while honoring the principle of least privilege, so the lowest role carrying those rights must be chosen.

Common mistake: Defaulting to Admin for 'invite others' — Admin adds delete-workspace and membership-management powers far beyond what the requirements state, violating least privilege.

Expert Analysis

Why the Answer Is Correct

Workspace role documentation grants the Member role (B) the abilities to view, edit, publish, reshare content, and add or invite others to the workspace. Since the Sales group must access the workspace and invite other users, and no requirement mentions deleting the workspace or granting admin rights, Member is the lowest role covering every stated need — the definition of least privilege here.

Why the Other Options Are Wrong

Contributor (A) can view, edit, and publish content but cannot invite other users or manage permissions, missing the second requirement. Admin (C) can do everything Member can plus delete workspaces and manage all membership — more privilege than required. Viewer (D) is read-only, failing both the access-to-publish expectation and the invite requirement.

Community Comment Notes

A commenter distills the tie-breaker: members can reshare while contributors cannot, so Member is the least privilege meeting the invite requirement. Another rules out Viewer because inviting is impossible at that tier, leaving Member as the floor.

Official Reference

https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-roles-new-workspaces

This link opens the official vendor documentation in a new tab.

Community Votes

100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

Odidepse 👍 3 Answered B

Presented answer is correct B, cannot be viewer because of the ability to invite requirement, the next least privilege is member which can view and edit as well as invite.
SylUK 👍 1 Answered B

B is the correct answer : Member Only member can ' Provide access to a group named Sales. Ensure that Sales can invite other users to Workspace1' following the principle of least privilege.
Jasmine121 👍 1 Answered B

Members can reshare, while contributors can not.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All PL-300 Questions

Access 116 questions with complete answers and detailed explanations.

View Full PL-300 Practice Test →

← Back to PL-300 Study Guide