DP-700 practice question 6 of 25

Your company has a sales department that uses two Fabric workspaces named Workspace1 and Workspace2. The company decides to implement a domain…

Choose your answer, then check it against the explanation.

Your company has a sales department that uses two Fabric workspaces named Workspace1 and Workspace2. The company decides to implement a domain strategy to organize the workspaces. You need to ensure that a user can perform the following tasks: Create a new domain for the sales department. Create two subdomains: one for the east region and one for the west region. Assign Workspace1 to the east region subdomain. Assign Workspace2 to the west region subdomain. The solution must follow the principle of least privilege. Which role should you assign to the user?

Answer options

Correct Answer:

Explanation

The user is required to perform several tasks, the first of which is to "Create a new domain for the sales department." According to Microsoft Fabric documentation, the creation of a new, top-level domain is a tenant-level operation. This action can only be performed by users assigned the Fabric admin, Power BI admin, or Global administrator role. While a domain admin can create subdomains and a domain contributor can assign workspaces, neither role has the necessary permissions to create the initial domain. Therefore, to accomplish all the specified tasks, the user must be assigned the Fabric admin role, which is the minimum role that satisfies all requirements.

Why Incorrect

A. workspace Admin: This role is scoped to a specific workspace and has no permissions to create or manage domains at the tenant level.

B. domain admin: This role can manage an existing domain, including creating subdomains, but it does not have the permission to create a new top-level domain.

C. domain contributor: This role has the most limited permissions, allowing only the assignment of workspaces to an existing domain, but not the creation of domains or subdomains.

References

1. Microsoft Learn

"Domains in Microsoft Fabric": Under the section "Create a domain

" the documentation explicitly states: "To create a domain

you must be a Fabric administrator (or higher)." This directly supports the requirement for the Fabric admin role to perform the first task.

2. Microsoft Learn

"Roles in domains": This section details the capabilities of domain-level roles. It clarifies that a Domain admin can "Create and update subdomains" and "Add/remove workspaces from the domain

" but these actions presuppose the domain already exists. The role does not include permissions for top-level domain creation.

3. Microsoft Learn

"Understand Fabric admin roles": This document outlines the responsibilities of the Fabric administrator. It states

"Fabric administrators are responsible for...setting up and managing domains." This confirms that domain setup is a key function of this role.

Question 6 of 25

Keep practicing

Take the free DP-700 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test