Databricks Data Engineer Associate Question 513
Select 3You are managing a Databricks workspace and need to ensure that only specific users have access to sensitive data stored in a Delta table. You decide to implement data object access control. Which steps should you take to achieve this?
- A
Enable table access control in the Databricks workspace.
- B
Assign users to appropriate groups and grant permissions to those groups.
- C
Modify the Delta table's schema to include user-specific access columns.
- D
Apply GRANT commands to set permissions for the Delta table.
- E
Enable column-level encryption to restrict access to specific data.
Show answer and explanation
Correct answers: A, B, D
Explanation
To implement data object access control in Databricks, you need to enable table access control at the workspace level, manage user access through groups, and use GRANT commands to assign permissions to those groups or individual users. These steps ensure that only authorized users can interact with sensitive data while following security best practices.
- A. Correct.
Correct: Table access control must be enabled in the Databricks workspace to enforce fine-grained permissions on data objects.
- B. Correct.
Correct: Assigning users to groups and managing permissions through groups simplifies access management and aligns with best practices.
- C. Incorrect.
Incorrect: Modifying the table's schema for access control is not a valid approach. Access control should be managed through permissions, not schema changes.
- D. Correct.
Correct: The GRANT command is used to assign specific permissions (e.g., SELECT, INSERT) to users or groups for a Delta table.
- E. Incorrect.
Incorrect: Column-level encryption is a security feature, but it does not directly implement or enforce role-based access control for users.