DP-750: Implementing Data Engineering Solutions Using Azure DatabricksDemo

By Microsoft · Question Mode

QuestionQ83

Secure and govern Unity Catalog objects

You have an Azure Databricks workspace enabled for Unity Catalog that contains a catalog named catalog1.

You have a group named group1. Group1 already has the USE CATALOG privilege on catalog1.

You create a schema named schema1 in catalog1.

You need to ensure that group1 can create tables in schema1. Group1 must not be able to grant permissions on the schema or its objects. The solution must follow the principle of least privilege.

How should you complete the SQL statement?

Select
GRANT  ON SCHEMA catalog1.schema1
Explanation

Unity Catalog requires USE CATALOG, USE SCHEMA, and CREATE TABLE to add a table to a schema. The existing catalog privilege plus CREATE TABLE and USE SCHEMA grants exactly the required access. Permission management requires ownership or MANAGE, neither of which is granted.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!