mediumMultiple Choice
DP-203 Practice Question: A company uses Azure Synapse Analytics with a…
A company uses Azure Synapse Analytics with a dedicated SQL pool. They need to ensure that a team of data scientists can query all tables in the 'sales' schema but cannot modify any data or schema objects. Which role should the team be assigned?
⚠ Common exam trap
Candidates often confuse `db_datareader` with `db_datawriter` or assume `db_ddladmin` is required for querying, not realizing that read-only access is specifically granted by `db_datareader` without any write or schema modification capabilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
db_datareader
The `db_datareader` role grants read-only access to all user tables in a database, allowing the team to query all tables in the 'sales' schema without the ability to modify data or schema objects. This aligns perfectly with the requirement for data scientists to perform SELECT queries only.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
db_owner
Why it's wrong here
db_owner confers full control over the database, including data and schema modification, so it violates the read-only requirement. It is tempting because it guarantees access to every table, and it would be correct for administrators managing the entire database.
- ✓
db_datareader
Why this is correct
Granting db_datareader provides SELECT permission on all user tables and views within the dedicated SQL pool database, satisfying the read-only requirement across the entire sales schema. It confers no INSERT, UPDATE, DELETE, or DDL rights, so data scientists cannot modify data or schema objects, matching the stated constraint precisely.
- ✗
db_ddladmin
Why it's wrong here
db_ddladmin grants permission to create, alter and drop schema objects, which exceeds the read-only requirement. It is tempting because it is a restricted administrative role, and it would be correct for a team that must deploy and modify table definitions.
- ✗
db_datawriter
Why it's wrong here
db_datawriter permits INSERT, UPDATE and DELETE on all user tables, directly breaching the no-modification requirement. It is tempting because it is a narrow, non-administrative role, and it would be correct for an application that must load or change data.
Go deeper
Related to this question
About these practice questions
This DP-203 question is part of Courseiva's 509-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.