DP-750: Implementing Data Engineering Solutions Using Azure DatabricksDemo

By Microsoft · Question Mode

QuestionQ72

Secure and govern Unity Catalog objects

You have an Azure Databricks workspace named Workspace1 that is attached to a Unity Catalog metastore named metastore1.

You need to register an Azure Storage account named account1, with a hierarchical namespace enabled, as an external location. The external location must authenticate to account1 by using a managed identity, and the solution must follow the principle of least privilege.

Which three actions should you perform in sequence?

Drag & Drop
Assign the Storage Blob Data Owner role to the access connector.
Assign Workspace1 the Storage Blob Data Contributor role for account1.
Register the access connector as a storage credential in metastore1.
Create a Databricks access connector.
Assign the Storage Blob Data Contributor role to the access connector.
Register the access connector as a storage credential in Workspace1.
Explanation

An Azure Databricks access connector provides the managed identity that Unity Catalog uses to access ADLS Gen2. Storage Blob Data Contributor grants the required data access without the additional ownership permissions of Storage Blob Data Owner. The connector is then registered as a Unity Catalog storage credential in the metastore for use by an external location.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!