List Item Access Details REST API is mis-scoped

The admin REST api for List Item Access Details is misscoped to tenant.read.all.  This prevents a capacity administrator or workspace administrator who is not a tenant level administrator from using this API to govern access to items under their area of control.  There is no alternative API scoped to the workspace level.

This API requires you to pass in a workspace id, so it should fail if you attempt to read data from a workspace you don't have access to.

On the whole, Fabric needs management apis that are scoped to workspace that can also then work for capacity and/or tenant if appropriate rights are granted.