You manage a Power BI workspace where the finance team publishes reports. A data engineer needs to configure and manage scheduled refresh on the semantic models and edit the underlying data models, but company policy prohibits them from publishing or updating the workspace app that distributes content to executives. You must assign the least-privileged workspace role that meets these requirements. Which role should you assign?