1. A Databricks administrator runs the following command to grant a privilege in Unity Catalog: ```sql GRANT SELECT ON TABLE prod.finance.ledger TO `reporting_group`; ``` Later, the admin discovers that members of `reporting_group` still cannot query the table. Assuming the GRANT statement executed without error, what is the MOST LIKELY reason the users cannot query the table?
- A. SELECT privilege must be granted at the catalog level, not the table level.
- B. The group also needs USE CATALOG on `prod` and USE SCHEMA on `prod.finance`.✓ Correct
- C. Unity Catalog requires granting READ FILES instead of SELECT for table access.
- D. The GRANT statement is invalid because group names must be quoted with single quotes, not backticks.
Explanation
In Unity Catalog, granting SELECT on a table alone is insufficient. Users must also have USE CATALOG privilege on the parent catalog and USE SCHEMA privilege on the parent schema before they can access any object within them. Option A is incorrect because SELECT can be granted at the table level. Option C is incorrect because READ FILES is used for external locations/volumes, not tables. Option D is incorrect because backtick quoting for identifiers is valid in Databricks SQL.