Databricks-DE-Pro Data Governance — All Questions With Answers

GRANT USAGE ON CATALOG main TO `finance_group`;
GRANT SELECT ON SCHEMA main.finance TO `finance_group`;
GRANT SELECT ON TABLE main.finance.transactions TO `finance_group`;
REVOKE SELECT ON TABLE main.finance.transactions_sensitive TO `finance_group`;

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:PutObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::my-company-data/*",
        "arn:aws:s3:::my-company-data"
      ]
    }
  ]
}

GRANT SELECT ON CATALOG main TO `data_science_group`;
GRANT USE SCHEMA ON SCHEMA main.raw TO `data_science_group`;
REVOKE SELECT ON TABLE main.raw.sensitive_data FROM `data_science_group`;