Power BI Workspace Roles: Manage Permissions Without Content Access

Quick Answer

Admin is the answer, but it's worth understanding why it's the answer despite not being a clean fit: Power BI's workspace roles don't actually include one that grants permission management without also granting content access, so Admin ends up being the minimum role that satisfies the requirement simply because it's the only role with permission-management rights at all. Admin sits at the top of the role hierarchy and includes managing workspace membership and permissions alongside full content access, and there's no narrower role positioned specifically for permissions alone. The other roles fail for the same underlying reason, each in a different direction: Contributor can view and edit content but has no ability to manage who else has access; Viewer is limited to read-only content access; and Member allows viewing and editing but likewise stops short of managing permissions. None of them include the specific capability the scenario asks for, which leaves Admin as the only option that actually contains it, even though it grants more than strictly necessary. This is a useful pattern to recognize on scenario questions generally: when a requirement doesn't map cleanly onto any role's intended purpose, look for the minimum role that happens to include the needed capability as a side effect, rather than assuming a perfectly scoped role must exist.