Microsoft Fabric · Workspace Roles
Contributor
Create and modify items, execute notebooks/pipelines, read all data. Cannot add members, reshare items, or manage workspace settings.
Scope: Single Fabric workspace - item authoring without member management
Permissions
- Items - Create, modify, write, and delete all item types
- Read all data - OneLake APIs, Spark, TDS endpoints, Lakehouse explorer
- Execute - Run notebooks, pipelines, Spark jobs, ML experiments
- Gateways - Schedule refreshes and modify gateway connection settings
Common use cases
- Data engineers building pipelines, notebooks, and warehouses
- Analysts building reports and semantic models
- Most common day-to-day authoring role
Best practices
- Default role for individual contributors on a workspace
- Pair with item-level Reshare permission when external sharing is needed
Common questions
When should I assign the Contributor role?
Assign Contributor when you need to: Data engineers building pipelines, notebooks, and warehouses; Analysts building reports and semantic models; and Most common day-to-day authoring role. It is part of Microsoft Fabric and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Contributor role do?
The Contributor role grants permissions including: Items - Create, modify, write, and delete all item types; Read all data - OneLake APIs, Spark, TDS endpoints, Lakehouse explorer; Execute - Run notebooks, pipelines, Spark jobs, ML experiments; and Gateways - Schedule refreshes and modify gateway connection settings. See the Permissions section above for the full list.