Databricks Certified Data Engineer - Associate

Explanation

The correct answer is E. GRANT USAGE ON DATABASE customers TO team;

Why this is correct:

1. USAGE privilege: The USAGE privilege on a database allows users/groups to:

   • List and view the database
   • See what tables exist in the database
   • Access the database metadata

2. Database scope: The requirement is to grant access to the entire "customers" database, so the command should target DATABASE customers.

3. Direction of grant: The permission should flow FROM the database TO the team, so the syntax is GRANT ... ON DATABASE customers TO team;

Why other options are incorrect:

• A. GRANT VIEW ON CATALOG customers TO team;: This grants VIEW privilege on a catalog, not on a database. VIEW privilege allows viewing catalog metadata, not database contents.

• B. GRANT CREATE ON DATABASE customers TO team;: This grants CREATE privilege, which allows creating new tables in the database, but doesn't necessarily grant the ability to see existing tables.

• C. GRANT USAGE ON CATALOG team TO customers;: This has the direction reversed (granting from team to customers) and targets a catalog instead of a database.

• D. GRANT CREATE ON DATABASE team TO customers;: This grants CREATE privilege on a database named "team" to "customers", which is completely opposite to what's needed.

Key Points:

• USAGE is the appropriate privilege for viewing database contents and metadata
• The syntax follows GRANT <privilege> ON <object_type> <object_name> TO <principal>
• For viewing existing tables in a database, USAGE on the database is sufficient
• The team needs to see what tables already exist, which is exactly what USAGE privilege provides