To implement a domain strategy and manage subdomains within Fabric, the domain admin role is the appropriate role for the user. A domain admin has the permissions necessary to: * Create a new domain (for the sales department). * Create subdomains (for the east and west regions). * Assign workspaces (such as Workspace1 and Workspace2) to the appropriate subdomains. The domain admin role allows for managing the structure and organization of workspaces in the context of domains and subdomains while maintaining the principle of least privilege by limiting the user's access to managing the domain structure specifically.