Databricks Data Engineer Associate Question 516
Select 2You are tasked with implementing data object access controls in a Databricks workspace. Your goal is to ensure that a specific group of users has read-only access to a Delta table in a Unity Catalog-enabled environment. Which steps should you take to achieve this?
- A
Assign the group to a Databricks SQL access role.
- B
Grant the SELECT privilege on the Delta table to the group using Unity Catalog.
- C
Modify the workspace-level permissions to restrict write access for the group.
- D
Create a Unity Catalog metastore, assign it to the workspace, and configure access for the group.
- E
Grant the MODIFY privilege on the Delta table to the group using Unity Catalog.
Show answer and explanation
Correct answers: B, D
Explanation
In an environment with Unity Catalog enabled, table-level access control is managed through specific privileges. To ensure read-only access, the SELECT privilege must be granted to the group for the Delta table. Additionally, Unity Catalog must be properly set up with a metastore assigned to the workspace. Other steps, like modifying workspace-level permissions or assigning roles, do not directly manage table-level access in Unity Catalog.
- A. Incorrect.
Assigning the group to a Databricks SQL access role is not sufficient to control access to specific Delta tables. This role governs general query access within Databricks SQL, not fine-grained table permissions.
- B. Correct.
Granting the SELECT privilege on the Delta table to the group is the correct way to provide read-only access to the table in Unity Catalog.
- C. Incorrect.
Modifying workspace-level permissions does not directly control access to Delta tables in Unity Catalog. Unity Catalog uses fine-grained privileges at the table level.
- D. Correct.
Creating a Unity Catalog metastore, assigning it to the workspace, and configuring access is a necessary step when working in a Unity Catalog-enabled environment to manage table-level permissions.
- E. Incorrect.
Granting the MODIFY privilege would allow the group to make changes to the table, which contradicts the requirement for read-only access.