Databricks-DE-Assoc Governance and Security Practice Question
A data engineer needs to grant the `analyst` group the ability to read data from a Unity Catalog table `sales.fact_orders`. They also want to ensure that members of `analyst` can see the table in the catalog explorer but cannot modify it. Which privilege should be granted to the `analyst` group on the table?
⚠ Common exam trap
Candidates often confuse USAGE with SELECT; USAGE is for catalogs and schemas, not tables, and does not grant data access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
GRANT SELECT ON TABLE sales.fact_orders TO `analyst`;
To allow read-only access to a Unity Catalog table, the SELECT privilege is granted. It permits querying and viewing metadata without modification rights. MODIFY would allow changes, ALL PRIVILEGES is excessive, and USAGE is not applicable to tables. SELECT is the least privilege that meets the requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
GRANT USAGE ON TABLE sales.fact_orders TO `analyst`;
Why it's wrong here
USAGE is not a valid privilege on a table in Unity Catalog. USAGE applies to catalogs and schemas to allow access to objects within them. Granting USAGE on a table would result in an error. To read data, SELECT is required, not USAGE.
- ✗
GRANT MODIFY ON TABLE sales.fact_orders TO `analyst`;
Why it's wrong here
MODIFY allows users to insert, update, and delete data in the table. It does not grant read access to the table's data or metadata. Granting MODIFY would let analysts change data, which violates the requirement to prevent modifications. It also does not allow viewing the table in Catalog Explorer without SELECT.
- ✗
GRANT ALL PRIVILEGES ON TABLE sales.fact_orders TO `analyst`;
Why it's wrong here
ALL PRIVILEGES includes SELECT, MODIFY, and other privileges, which would allow analysts to modify the table. This exceeds the required read-only access and violates the requirement to prevent modifications. It is overly permissive and not the least privilege needed.
- ✓
GRANT SELECT ON TABLE sales.fact_orders TO `analyst`;
Why this is correct
The SELECT privilege allows users to read data from the table, which includes querying it and viewing its metadata in Catalog Explorer. It does not grant the ability to modify data or table structure. This is the minimum privilege required for read-only access, aligning with the requirement.
About these practice questions
Courseiva writes every Databricks-DE-Assoc question from scratch — 276 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Databricks exam blueprint
This Databricks-DE-Assoc practice question is part of Courseiva's free Databricks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Databricks-DE-Assoc exam.