Microsoft Fabric Data Engineer Associate DP-700 Practice Question

Granting the auditors Read permission on the Lakehouse by using Manage permissions limits their access to that single item. The Read permission lets them query data (through the SQL endpoint or shortcuts) but prevents changes to tables, notebooks, or other item properties and does not expose other workspace items.

Assigning the Viewer role at the workspace level would give read access to every item in the workspace, violating the "minimum access" requirement. The Contributor role would also allow the auditors to add or change items. Creating another workspace and deployment pipeline adds unnecessary overhead and still gives broader permissions than required. Therefore, item-level Read permission on FinanceLH is the most restrictive and appropriate solution.