Noos
PT EN
RAN-DBDEA-00108
Ranvier · DBDEA

Exam DBDEA Topics: governance Difficulty: medium

A platform admin runs the following statements against a Unity Catalog metastore, intending to cut off a contractor's read access: ```sql GRANT SELECT ON TABLE main.sales.orders TO data_analysts; REVOKE SELECT ON TABLE main.sales.orders FROM `contractor@acme.com`; ``` The user contractor@acme.com is a member of data_analysts. A few minutes after the REVOKE completes, the contractor runs SELECT COUNT(*) FROM main.sales.orders and it succeeds. Why does the contractor keep access?

Options (Reading Mode) Click to filter discussion →
  1. A. REVOKE statements only take effect after the principal's active sessions end, and the contractor still has an open session in the workspace.
  2. B. The contractor's SELECT comes from the group grant — REVOKE only removes direct grants, leaving group access intact.
  3. C. REVOKE must be executed by a metastore admin to affect principals other than the statement's author.
  4. D. The contractor also needs USE SCHEMA on main.sales before a table-level REVOKE can apply to them.
Reveal answer

Correct answer: The contractor's SELECT comes from the group grant — REVOKE only removes direct grants, leaving group access intact.

Reference: https://docs.databricks.com/aws/en/data-governance/unity-catalog/manage-privileges/

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (B): The contractor's SELECT comes from the group grant — REVOKE only removes direct grants, leaving group access intact.

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.