
Ultimate access to all questions.
A new data engineering team has been assigned to work on a project. The team will need access to database customers in order to see what tables already exist. The team has its own group team. Which of the following commands can be used to grant the necessary permission on the entire database to the new team?
A
GRANT VIEW ON CATALOG customers TO team;
B
GRANT CREATE ON DATABASE customers TO team;
C
GRANT USAGE ON CATALOG team TO customers;
D
GRANT CREATE ON DATABASE team TO customers;
E
GRANT USAGE ON DATABASE customers TO team;
Explanation:
To grant a team access to see what tables exist in a database, the appropriate permission is USAGE on the database. Let's analyze each option:
A. GRANT VIEW ON CATALOG customers TO team; - Incorrect. This grants VIEW permission on a catalog, not on a database. The requirement is for database access.
B. GRANT CREATE ON DATABASE customers TO team; - Incorrect. This grants CREATE permission, which allows creating new tables, but doesn't grant the ability to view existing tables.
C. GRANT USAGE ON CATALOG team TO customers; - Incorrect. This has the syntax backwards - it grants permission on catalog 'team' to 'customers', not the other way around.
D. GRANT CREATE ON DATABASE team TO customers; - Incorrect. This grants CREATE permission on database 'team' to 'customers', which is the opposite of what's needed.
E. GRANT USAGE ON DATABASE customers TO team; - CORRECT. The USAGE privilege on a database allows users/groups to:
In Databricks Unity Catalog, the USAGE privilege on a database is the minimum permission required to view the contents of that database. Without USAGE, users cannot see what tables exist in the database, even if they have permissions on individual tables.