Microsoft Fabric · Workspace Roles
Member
Add members or others with lower permissions and reshare items. Full item authoring rights but cannot delete the workspace or manage workspace identity.
Scope: Single Fabric workspace - authoring and contribution
Permissions
- Members - Add Members, Contributors, Viewers (but not Admins)
- Reshare - Allow others to reshare items
- Items - Create, modify, write, and delete all item types
- Read all data - OneLake APIs, Spark, TDS endpoints, Lakehouse explorer
- Execute - Run notebooks, pipelines, Spark jobs, ML experiments
- Gateways - Schedule refreshes and modify gateway connection settings
Common use cases
- Senior data engineers or analysts on a team
- Day-to-day workspace operations without admin responsibility
Best practices
- Default role for trusted workspace participants who don't need workspace lifecycle access
Common questions
When should I assign the Member role?
Assign Member when you need to: Senior data engineers or analysts on a team; and Day-to-day workspace operations without admin responsibility. It is part of Microsoft Fabric and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Member role do?
The Member role grants permissions including: Members - Add Members, Contributors, Viewers (but not Admins); Reshare - Allow others to reshare items; Items - Create, modify, write, and delete all item types; Read all data - OneLake APIs, Spark, TDS endpoints, Lakehouse explorer; Execute - Run notebooks, pipelines, Spark jobs, ML experiments; and Gateways - Schedule refreshes and modify gateway connection settings. See the Permissions section above for the full list.