Databricks-DE-Assoc Governance and Security — All Questions With Answers

GRANT SELECT ON TABLE sensitive_data TO `data_scientists`;
REVOKE SELECT ON TABLE sensitive_data FROM `data_scientists`;
GRANT SELECT ON TABLE sensitive_data TO `data_scientists`;

GRANT SELECT ON TABLE sales_data TO `data-analyst-group`;
GRANT USE CATALOG ON CATALOG main TO `data-analyst-group`;
GRANT USE SCHEMA ON SCHEMA main.sales TO `data-analyst-group`;

GRANT USE CATALOG ON CATALOG main TO `finance-team`;
GRANT USE SCHEMA ON SCHEMA main.silver TO `finance-team`;
GRANT SELECT ON TABLE main.silver.transactions TO `finance-team`;

Error: [UNAUTHORIZED_ACCESS] User 'user@example.com' does not have USE CATALOG privilege on catalog 'finance'.

{"statement": "GRANT SELECT ON TABLE sales_data TO 'data_scientists'", "catalog": "main", "schema": "prod"}

GRANT USAGE ON CATALOG main TO `data_analysts_group`;
GRANT USAGE ON SCHEMA main.sales TO `data_analysts_group`;
GRANT SELECT ON TABLE main.sales.orders TO `data_analysts_group`;

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject", "s3:ListBucket"],
      "Resource": ["arn:aws:s3:::my-bucket/*"]
    }
  ]
}

{
  "type": "access_control_policy",
  "principal": "analyst_group",
  "action": "SELECT",
  "condition": "WHERE region = 'US'"
}