Question

A GenAI engineer deploys a RAG chatbot as a Model Serving endpoint. The endpoint queries a Vector Search index and reads a Delta table that contains sales records restricted by row-level filters. The compliance team requires that each end user only sees rows they are individually entitled to, rather than every user seeing the same data through the service principal that owns the endpoint. Which approach best satisfies this requirement while using Unity Catalog governance?

Accepted Answer

Enable on-behalf-of-user authentication (user-scoped credentials) for the serving endpoint so Unity Catalog evaluates row-level and column-level policies against the invoking user's identity

Answer

Grant the endpoint's service principal full SELECT on the Delta table and filter rows in the application code based on the username passed in the request payload

Answer

Create a separate serving endpoint per user and grant each endpoint's service principal only the rows that user is allowed to see

Answer

Disable row-level security on the source table and rely on the vector index metadata filters to enforce per-user entitlements