Currently, the Workspace Info – Get Scan Result API is available only as an admin-level API and requires either a Fabric/Tenant Administrator role or a service principal explicitly granted access to tenant-level admin APIs. Workspace Admin permissions alone are not sufficient.
In many organizations, developers and workspace owners are not allowed to hold Fabric or Tenant Administrator roles due to governance and security policies. As a result, workspace administrators are unable to programmatically retrieve metadata such as Created By, Last Modified By, or item inventory details for the workspaces they manage.
At present, there is no supported alternative API that allows workspace administrators to scan or retrieve governance metadata scoped only to their own workspace, which limits self-service governance, auditing, and automation scenarios.
Proposed Enhancement
Introduce workspace-scoped metadata scan APIs that:
Can be executed by Workspace Admins
Allow retrieval of item-level metadata such as ownership, last modified details
Do not require tenant-level or Fabric Administrator permissions
Business Impact
Enables self-service governance and auditing at the workspace level
Avoids over-privileging users with tenant-wide admin roles
Aligns with enterprise security and least-privilege policies
Reduces dependency on centralized admin teams for basic metadata needs
This enhancement would significantly improve governance capabilities while maintaining strict security boundaries.
