Microsoft Fabric · Workspace Roles

Contributor

Create and modify items, execute notebooks/pipelines, read all data. Cannot add members, reshare items, or manage workspace settings.

Scope: Single Fabric workspace - item authoring without member management

Permissions

  • Items - Create, modify, write, and delete all item types
  • Read all data - OneLake APIs, Spark, TDS endpoints, Lakehouse explorer
  • Execute - Run notebooks, pipelines, Spark jobs, ML experiments
  • Gateways - Schedule refreshes and modify gateway connection settings

Common use cases

  • Data engineers building pipelines, notebooks, and warehouses
  • Analysts building reports and semantic models
  • Most common day-to-day authoring role

Best practices

  • Default role for individual contributors on a workspace
  • Pair with item-level Reshare permission when external sharing is needed

Official Microsoft Learn documentation →

Open the interactive RBACMap →