Forum Discussion
User with Contributor Role Unable to Checkout Branches or Create New Workspaces
Hi ifeanyi
-
Thank you for sharing your thoughtful workaround for managing least-privilege access in Microsoft Fabric.
-
We understand the current limitations around granular role-based permissions, especially compared to Synapse or Data Factory.
-
Using a dedicated collaboration workspace to isolate contributor access is a practical and effective solution.
In the meantime, if you're open to it, we recommend sharing your approach and suggestions on the Fabric Ideas - Microsoft Fabric Community It’s actively reviewed by the product team and helps influence future roadmap priorities.
Let us know if you’d like assistance with anything else or help streamlining your current setup further.
Thanks for being a part of Microsoft Fabric Community Forum.-
Microsoft EmployeeHi ifeanyi ,
Thank you very much for your valuable contribution.
I’d like to better understand how your approach could fit into our setup. Currently, it seems that each user requires at least one dedicated workspace. If you have a collaboration workspace where multiple users are working simultaneously, only one branch can be active at a time.
I’m also curious to explore what happens when a developer is involved in multiple projects. It could become a maintenance challenge if we need to create a separate workspace for each developer and project combination.
I look forward to hearing your thoughts on this.
Hi hernandezpaulms ,
Thank you for raising these important considerations.
You're absolutely right — there is a potential maintenance challenge when managing multiple workspaces, especially when developers are contributing across several projects. The intention behind our current approach is to allow contributors to branch out from the collaborative workspace, where all users have admin rights. This enables them to create their own isolated workspaces without affecting the main dev branch.
That said, we're still in the experimental phase and are hopeful that the native Git integration in Microsoft Fabric will soon evolve to better support the necessary functionality for contributor roles.
In parallel, we're also exploring an alternative approach where, as an admin of the main dev branch, I create dedicated branches for individual contributors (e.g., feature-x, feature-y, feature-z). Each contributor can then link their personal workspace to their respective feature branch, work independently, and later merge their changes back into the dev branch in a more controlled manner.
Hope this was helpful — I’d be keen to hear how others are approaching this as well.