QuestionQ6

Securing Data

A data analyst finds that the developers group has unauthorized access to sensitive data in the Unity Catalog catalog finance_catalog, which should be available only to the finance team.

Which SQL command should the analyst use to remove the developers group’s access to the catalog?

  • A GRANT USAGE ON CATALOG ‘finance_catalog’ TO ‘finance’;
  • B ALTER CATALOG ‘finance_catalog’ DROP PERMISSIONS FOR ‘developers’;
  • C REVOKE USAGE ON CATALOG ‘finance_catalog’ FROM ‘developers’;
  • D REVOKE USE ON CATALOG ‘finance_catalog’ FROM ‘developers’;
Explanation

Catalog access must be removed by revoking the group’s catalog-usage privilege with a REVOKE ... ON CATALOG ... FROM ... statement. Unity Catalog’s current documented privilege name is USE CATALOG—for example, REVOKE USE CATALOG ON CATALOG finance_catalog FROM developers. Among the supplied choices, the REVOKE USAGE ON CATALOG ... FROM developers form is the intended catalog-access revocation; the other commands either grant a privilege, use unsupported permission-removal syntax, or do not name the usage privilege correctly.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!