You have a Fabric tenant that contains two workspaces named Workspace1 and Workspace2 and a user named User1.
You need to ensure that User1 can perform the following tasks:
- Create a new domain.
- Create two subdomains named subdomain1 and subdomain2.
- Assign Workspace1 to subdomain1.
- Assign Workspace2 to subdomain2.
The solution must follow the principle of least privilege.
Which role should you assign to User1?