Question

A financial services company deploys a customer-facing RAG chatbot whose model is registered in Unity Catalog. During a compliance audit, the security team must produce evidence of exactly which users and service principals have queried the production model serving endpoint and when, without relying on custom application-side logging. Which Unity Catalog / Databricks capability directly satisfies this requirement?

Accepted Answer

Query the Unity Catalog system audit logs (system.access.audit) to review recorded model and endpoint access events

Answer

Add GRANT statements on the registered model and inspect the current privilege grants to see who has access

Answer

Enable inference tables on the endpoint and parse the request payloads for identity information

Answer

Review the MLflow model version lineage graph to trace which upstream tables fed the model