Databricks Data Engineer Associate Question 515
Select 3A data engineer is tasked with restricting access to a specific Delta table in a Databricks workspace to only members of a specific user group called 'analytics_team'. The workspace uses Unity Catalog for access control. Which steps should the data engineer take to achieve this?
- A
Grant SELECT privileges on the Delta table to the 'analytics_team' group using Unity Catalog.
- B
Ensure the Delta table is registered in a Unity Catalog-managed schema.
- C
Configure table ACLs directly on the Delta table in the Databricks workspace.
- D
Revoke all privileges from public roles or users who should not have access to the Delta table.
- E
Create a service principal for the 'analytics_team' group and assign it to the Delta table.
Show answer and explanation
Correct answers: A, B, D
Explanation
To implement access control for a Delta table in Databricks using Unity Catalog, the table must be registered in a Unity Catalog-managed schema, and SELECT privileges must be granted to the appropriate group. Additionally, revoking privileges from unintended users ensures that access is restricted only to authorized groups. Unity Catalog centralizes access control, so configuring direct ACLs on Delta tables is not applicable.
- A. Correct.
Correct: In Unity Catalog, privileges like SELECT can be granted to user groups to control access to tables.
- B. Correct.
Correct: Unity Catalog requires that tables be registered within a Unity Catalog-managed schema to enforce access control policies.
- C. Incorrect.
Incorrect: Table ACLs cannot be configured directly on Delta tables in the Databricks workspace. Unity Catalog is used for centralized access control.
- D. Correct.
Correct: To ensure data security, privileges should be revoked from roles or users who should not have access to the table.
- E. Incorrect.
Incorrect: Creating a service principal for the group is not necessary to control access to a Delta table. Groups can directly be assigned privileges using Unity Catalog.