You have a Fabric tenant containing two workspaces named Workspace1 and Workspace2 and a user named User1.

You need to grant User1 the necessary permissions to perform the following tasks:

• Create a new domain.
• Create two subdomains named subdomain1 and subdomain2.
• Assign Workspace1 to subdomain1.
• Assign Workspace2 to subdomain2.

The solution must adhere to the principle of least privilege.

Which role should you assign to User1?