Delegate tenant settings
Microsoft Fabric allows organizations to delegate settings from the tenant to the capacity, and from the capacity to workspaces. Delegation allows the organization to give admins control over specific settings relevant to their area of responsibility. Delegation prevents centralized admins from becoming a bottle neck for teams across the organization that require control over specific settings.
Here are some key concepts related to delegating settings in Fabric:
Tenant Settings - Global settings controlled by tenant administrators that impact the entire tenant.
Domain - A logical grouping of workspaces aimed at facilitating data mesh architecture.
Capacity - A dedicated compute resource. Capacity admins can delegate settings concerning the performance and consumption of compute resources.
Workspace - Collaborative environments where Fabric items are stored and shared. Certain tenant settings can be delegated to workspaces through a domain or a capacity.
Domain, capacity and workspace admins can override tenant settings. Overriding tenant settings allows admins to modify their environment to meet specific requirements. When a setting is adjusted in a domain or capacity, it affects only the workspaces linked to those administrative units. Similarly, changes to a workspace impact only the items stored within that workspace.
Delegation design
A setting can be delegated either through domains or capacities, but not both. This ensures clarity in governance and prevents conflicts in the management of settings.
After delegating to a domain or capacity, certain settings can be further delegated to workspaces. This allows for finer granularity in control, empowering workspace owners to customize the settings to their requirements. Tenant admins can bypass domain and capacity admins and delegate directly to workspaces.
Delegate settings to workspaces
Follow these steps to delegate settings to workspaces:
Delegate tenant settings to a capacity or a domain.
Locate the setting you want to delegate to a workspace in your domain or capacity.
Select the option to delegate to a workspaces. Some settings can't be delegated to workspaces. In such cases, there isn't an option to delegate to a workspace.
Select Apply
Audit your delegated settings
The following activity events represent tenant setting changes:
UpdatedAdminFeatureSwitch - Tenant delegation changes.
UpdateCapacityTenantSettingDelegation - Capacity delegation changes.
UpdateDomainTenantSettingDelegation - Domain delegation changes.
UpdateWorkspaceTenantSettingDelegation - Workspace delegation changes.