Databricks Data Engineer Associate Question 468
Select 2A company uses Databricks to manage its data pipelines and has implemented Unity Catalog for data governance. The team is tasked with ensuring that only specific users have access to sensitive data in a table. Which of the following steps are necessary to enforce fine-grained access control in Unity Catalog?
- A
Define a new metastore and link it to Unity Catalog
- B
Grant specific permissions (e.g., SELECT) to users or groups on the table
- C
Set row or column-level data masking policies using Dynamic Views
- D
Enable table lineage to track data usage
- E
Audit data access logs for compliance purposes
Show answer and explanation
Correct answers: B, C
Explanation
To enforce fine-grained access control in Unity Catalog, specific permissions must be granted to users or groups on the table (e.g., SELECT) and row/column-level data masking can be applied using Dynamic Views. These steps directly allow for controlling access to sensitive data. While table lineage and auditing are useful for monitoring and compliance, they do not implement access control.
- A. Incorrect.
Defining a new metastore is not required for enforcing fine-grained access control. Fine-grained access control can be implemented without creating a new metastore.
- B. Correct.
Granting specific permissions like SELECT to users or groups is a key step to enforce access control on a table in Unity Catalog.
- C. Correct.
Setting row or column-level data masking policies using Dynamic Views is essential to enforce fine-grained access control, allowing sensitive data to be masked or filtered based on user roles.
- D. Incorrect.
Enabling table lineage helps track data usage but does not directly enforce fine-grained access control.
- E. Incorrect.
Auditing data access logs is important for tracking and compliance but does not directly implement fine-grained access control.