A data engineer must create and edit workspace items but should not manage workspace membership. Which role is the usual least-privilege starting point?

1. Contributor
2. Viewer
3. Admin
4. No role and a copied workspace URL