DP-750: Implementing Data Engineering Solutions Using Azure DatabricksDemo

By Microsoft · Question Mode

QuestionQ64

Secure and govern Unity Catalog objects

An Azure Databricks workspace is enabled for Unity Catalog and contains two catalogs: Catalog1 and Catalog2.

An external application uses a service principal named SP1 to connect to a SQL warehouse.

You need to ensure that SP1 can query data in Catalog1 and Catalog2 while following the principle of least privilege.

Which catalog permissions should you grant to SP1?

  • A USE SCHEMA and SELECT
  • B USE CATALOG and SELECT
  • C USE CATALOG, USE SCHEMA, and SELECT
  • D USE CATALOG and USE SCHEMA
Explanation

Reading data from a Unity Catalog table or view requires USE CATALOG on the parent catalog, USE SCHEMA on the parent schema, and SELECT on the table or view. Granting those privileges on each catalog permits querying the contained data without granting write or administrative permissions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!