Loading...

Microsoft Fabric: Removing default contributor access for Workspace Identity

Microsoft Fabric: Removing default contributor access for Workspace Identity

Microsoft Fabric is removing default Contributor access for Workspace Identities to enhance security. This change will be rolled out from mid-July to early August 2025. Admins can still manually assign roles using RBAC. Review and update your configurations and notify relevant personnel. Learn more [here](https://learn.microsoft.com/fabric/security/workspace-identity). To strengthen security and align with customer feedback, Microsoft Fabric is updating how Workspace Identity permissions are handled. This change removes default Contributor access from Workspace Identities, reducing the risk of unintended access or misuse. This change will be on by default. When this will happen: General Availability (Worldwide): We will begin rolling out mid-July 2025 and expect to complete by early August 2025. How this will affect your organization: After this rollout, new Workspace Identities will no longer be granted default Contributor permissions. We will also remove the default Contributor access from existing Workspace Identities. Important: Modifying the application associated with a Workspace Identity is not supported and may cause the identity to stop functioning. You can still manually assign Workspace Identity service principals to any workspace role (such as Contributor, Member) using role-based access control (RBAC). However, be aware that anyone with access to the identity can assume it. To access this change: Navigate to the Fabric Workspace where you want to add RBAC role. Select Manage Access. Select Add people or groups. Enter the name of the Workspace identity (same as Workspace Name). Assign roles as appropriate. NOTE: After this rollout, admins can still add Workspace identity service principles to any workspace RBAC role if needed. Consider the implications if you plan on doing so, as any individual given access to the identity—example through workspace roles such as member or contributor—is allowed to assume the identity. Learn more: Workspace identity – Microsoft Fabric | Microsoft Learn What you need to do to prepare: This rollout will happen automatically by the specified dates with no admin action required before the rollout. Review your current Workspace Identity configurations and evaluate whether any existing workflows rely on default Contributor access. You may want to notify your admins and/or users about this change and update internal documentation. […]

The post Microsoft Fabric: Removing default contributor access for Workspace Identity appeared first on M365 Admin.

Published on:

Learn more
Need help with this product?

We can help you with Microsoft Fabric: Removing default contributor access for Workspace Identity

If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.

M365 Admin
M365 Admin

by João Ferreira

Share post:

Related posts

Microsoft Teams: Updated header and dashboard for chats and channels on mobile

Microsoft Teams mobile will feature a redesigned header and lightweight dashboard for chats and channels, improving navigation and access to k...

3 days ago

Deprecation for Manifest V2 (MV2) browser extensions support in Microsoft Edge

Microsoft Edge will retire Manifest V2 (MV2) extensions by early 2027, fully switching to Manifest V3 (MV3) for improved security and performa...

3 days ago

Power BI subscriptions: Changes to notification delivery and sender experience

Power BI is updating subscription notification delivery to improve reliability and sender reputation, changing sender identity, email formatti...

3 days ago

Cross-post SharePoint News to Engage

SharePoint News can now be cross-posted to Viva Engage communities with full fidelity and synchronized conversations across platforms. Rolling...

5 days ago

Call Quality Dashboard Custom Detailed Reports

Call Quality Dashboard will get a refreshed interface with enhanced accessibility and features like dark mode. Public preview starts mid-Augus...

5 days ago

Microsoft Copilot Pages: Access existing Pages from the “/” menu in chat

Starting late August 2026, users can access existing Pages via the “/” menu in Copilot chat, while the “Edit in Pages”...

5 days ago

Microsoft Teams: Collect information with List Form in Workflows

Microsoft Teams Workflows will add a new trigger, “A form is submitted,” for automating actions based on SharePoint list–backed fo...

5 days ago

Microsoft Viva Engage: Reducing reply notification volume in email

Microsoft Viva Engage will reduce email reply notifications by only sending alerts for direct replies, @mentions, and new posts, cutting down ...

5 days ago

Microsoft Teams: Lobby visibility will align with the “Who can admit from lobby” meeting option

Microsoft Teams will align lobby visibility with the “Who can admit from lobby” setting, so only users allowed to admit participan...

5 days ago

Microsoft Word: Similarity Checker retirement

Microsoft Word’s Similarity Checker will be retired on October 3, 2026, and removed from Microsoft Editor. Other writing and editing fea...

5 days ago

Newsletter

Get the latest Dynamics 365 and Power Platform content in your inbox

A curated digest of community blogs, product news, videos, and podcasts — delivered without the noise.

Weekly updates Unsubscribe anytime Fresh community picks
We use your email only for the newsletter and you can unsubscribe at any time.
By subscribing, you agree to the privacy policy.