Databricks Data Engineer Associate Question 207
Select 3A data engineering team is tasked with creating a shared SQL User-Defined Function (UDF) in Databricks to calculate a specific transformation that other teams can reuse. To ensure secure sharing of the UDF, what should the team consider about the Databricks security model for SQL UDFs?
- A
Permissions must be explicitly granted to users or groups to use the shared SQL UDF.
- B
SQL UDFs can only be shared within the same workspace and cannot be accessed across workspaces.
- C
The owner of the SQL UDF can revoke access to specific users or groups at any time.
- D
Shared SQL UDFs automatically inherit the permissions of the schema they are stored in.
- E
SQL UDFs cannot process sensitive data, as they are always executed in an unsecured environment.
Show answer and explanation
Correct answers: A, C, D
Explanation
In Databricks, SQL UDFs follow a robust security model. Permissions must be explicitly granted to users or groups, and the owner retains control over access. Additionally, SQL UDFs inherit the permissions of the schema they are stored in, ensuring consistent access control. Misconceptions like SQL UDFs always being insecure or limitations on cross-workspace sharing do not specifically reflect the security model.
- A. Correct.
Correct. Permissions must be explicitly granted to users or groups to control access to shared SQL UDFs, aligning with Databricks' security model.
- B. Incorrect.
Incorrect. While SQL UDFs cannot be directly shared across workspaces, this is not a limitation specific to the security model but rather a feature of Databricks' architecture.
- C. Correct.
Correct. The owner of a SQL UDF has the ability to manage and revoke access for specific users or groups, ensuring fine-grained control.
- D. Correct.
Correct. Shared SQL UDFs inherit the permissions of the schema they are stored in. This means schema-level permissions will apply to the UDF.
- E. Incorrect.
Incorrect. SQL UDFs are executed securely within the Databricks environment and can process sensitive data, provided proper access controls are in place.