Which role should be granted to an administrator who needs to monitor the health of a Fabric capacity, following the principle of least privilege?

• A. Fabric administrator
• B. Workspace administrator
• C. Capacity administrator
• D. Data gateway administrator

Answer: (C)

Monitoring the health of a Fabric capacity requires a role scoped to the capacity resource itself, with permissions to view health data, metrics, and capacity settings without broader admin access. The Capacity administrator role fits this need because it is specifically about managing and monitoring capacity—giving the necessary visibility into health status, usage, and alerts for the entire capacity, while avoiding broader rights across other components.

Other roles provide access that’s either too narrow or too broad for this task. A workspace administrator governs only a single workspace and won’t cover capacity-wide health. A data gateway administrator handles on-prem data gateway configurations, which aren’t related to Fabric capacity health. A Fabric administrator is typically broader, granting extensive rights across the Fabric environment, which goes beyond the principle of least privilege for this monitoring task.