Microsoft Fabric · Governance Domains

Domain Contributor

Contribute to a Fabric governance domain. Can assign their own workspaces to the domain and publish content into it, but cannot manage domain settings or other contributors.

Scope: Single Fabric governance domain - contribute without admin rights

Permissions

  • Workspace association - Associate owned workspaces with the domain
  • Domain content - Publish content to the domain
  • View domain - See domain settings and membership (read-only)

Common use cases

  • Workspace owners publishing data products to a shared domain
  • Citizen data engineers contributing to a business unit's domain catalogue

Best practices

  • Default role for workspace owners whose content belongs to a domain
  • Use security groups for assignment so membership scales with team changes
  • Pair with Workspace Admin training so contributors understand the cascading effect of domain assignment

Security considerations

  • Domain Contributors can change the domain assignment of workspaces they admin - this affects sensitivity labels and certification policies inherited from the domain
  • Promoting a workspace to a domain inherits any default sensitivity label configured for that domain - review label impact before assigning

Official Microsoft Learn documentation →

Open the interactive RBACMap →