Services
Summary
Microsoft Fabric will allow Workspace Admins to assign workloads directly at the workspace level starting mid-September 2025, simplifying onboarding without capacity-level settings. This feature is enabled by default but can be disabled by admins. Entra ID consent remains required for security and compliance.
Details
Introduction
Microsoft Fabric is introducing a new workspace-level scope for workload assignment, enabling Workspace Admins to add workloads directly to their workspaces without requiring capacity-level configuration. This enhancement simplifies workload onboarding and promotes broader adoption across your organization.
When this will happen
Public Preview rollout begins mid-September 2025.
How this affects your organization
- A new tenant setting titled Allow workspace admins to add workloads will appear under Tenant Settings > Additional Workloads.
- This setting is enabled by default.
- When enabled, Workspace Admins can add workloads from the More workloads gallery directly to their workspace.
- This capability is independent of capacity-level settings. Workloads added at the workspace level will persist even if removed from capacity-level assignment.
- You can disable this behavior at any time via the Fabric Admin Portal.
- Disabling the setting does not remove existing workspace-level workloads.
- Important: Even when workspace-scope workload assignment is enabled, users and/or tenant admins must still provide Entra ID consents according to tenant policies to add and interact with workloads. This ensures user-level permissions and security boundaries are respected.
What you can do to prepare
- Review the new tenant setting once available.
- If your organization prefers centralized governance, disable the setting to maintain current controls.
- Notify Workspace Admins if you choose to keep the setting enabled.
- Ensure users are aware of Entra ID consent requirements:
- Consent must be provided per tenant policies.
- This applies to both adding workloads and interacting with their items.
- Consent ensures workloads operate within authorized access boundaries.
Learn more: Add a workload in the workload hub (will be updated soon)
Compliance considerations| Compliance Area | Explanation |
|---|---|
| Does the change alter how existing customer data is processed, stored, or accessed? | Workloads added at workspace scope may access user data, subject to Entra ID consent. |
| Does the change modify how users can access, export, delete, or correct their personal data within Microsoft 365 services (GDPR Data Subject Rights)? | Access to workloads and their items is gated by Entra ID consent, which aligns with GDPR access controls. |
| Does the change include an admin control and, can it be controlled through Entra ID group membership? | Admins can toggle the feature in the Fabric Admin Portal, and workload access can be scoped via Entra ID policies. |