You manage a Microsoft Fabric workspace containing production lakehouses, semantic models, and reports. A business analyst needs to build and publish new Power BI reports and edit existing semantic models in this workspace, but company policy states she must not be able to add or remove other users or delete the workspace itself. Following the principle of least privilege, which workspace role should you assign?