A Fabric tenant admin wants the Finance department to manage which workspaces belong to the Finance domain and to adjust that domain's settings, without granting Finance staff any tenant-wide administrative rights. What should the tenant admin do?
Choose one.
Fabric domains support delegated administration: tenant admins create domains and can appoint domain admins (and domain contributors) so business areas govern themselves.
Appointing domain admins gives Finance exactly the scoped authority requested: manage the Finance domain's settings and which workspaces it contains, while leaving tenant settings untouched. The Fabric administrator role is tenant-wide overreach. Domain contributors are the near-twin, but they can only attach workspaces they administer and cannot change domain settings. Per-workspace Admin roles operate below the domain layer.
- Distinguish the scopes: Fabric admin, domain admin, domain contributor, workspace admin.
- Match the requirement: manage the domain's workspaces AND its settings, nothing tenant-wide.
- Rule out domain contributors: they assign only their own workspaces and can't change domain settings.
- Add the Finance leads as domain admins of the Finance domain.
Exam tip: Domain admin = manage the domain's settings and workspaces; domain contributor = attach your own workspaces only.
Configure Microsoft Fabric Workspace Settings: Spark, Domains, OneLake, Airflow — the lesson that teaches this.