Question

A Generative AI Engineer has registered a fine-tuned customer-support model in Unity Catalog. A separate analytics team in the same Databricks account, working in a different workspace attached to the same metastore, needs read access to run batch inference against this model. The engineer wants to grant the minimum privileges required following Unity Catalog best practices. Which approach correctly grants the analytics team the ability to use the model?

Accepted Answer

Grant USE CATALOG and USE SCHEMA on the containing catalog/schema, plus EXECUTE on the registered model, to the analytics team's group.

Answer

Add the analytics team as workspace admins in the engineer's workspace so they inherit access to all registered models.

Answer

Export the model artifact to a shared cloud storage bucket and have the analytics team load it directly from the object store path.

Answer

Grant ALL PRIVILEGES on the metastore to the analytics team's group so cross-workspace access is guaranteed.