Question 540
An SRE tool queries Databricks Jobs statuses across multiple workspaces. Engineers have applied Grant read/monitor privileges only to the service principal. Which result establishes the required behavior: A monitoring identity should not have permissions to edit production jobs?
Explanation
Correct Answer
The team used Grant read/monitor privileges only to the service principal to fulfill “A monitoring identity should not have permissions to edit production jobs.” Observing The identity reads run status but fails job mutation requests confirms the intended effect in the resulting workload.
Incorrect Answers
That observation is a valid indicator for “A CLI script must use a production workspace rather than a developer's default profile” when using Pass the intended Databricks CLI profile or host configuration. The scenario instead tests “A monitoring identity should not have permissions to edit production jobs”; the relevant result is The identity reads run status but fails job mutation requests.
That observation is a valid indicator for “A monitoring script needs the state of a specific current job run” when using Call the supported Jobs API run detail endpoint using its run ID. The scenario instead tests “A monitoring identity should not have permissions to edit production jobs”; the relevant result is The identity reads run status but fails job mutation requests.
The response identifies pending, running and terminal update states would demonstrate the separate action Query the supported pipelines API for update details, which addresses “A nightly dashboard should report active production pipeline update status.” It does not verify the requirement “A monitoring identity should not have permissions to edit production jobs” following Grant read/monitor privileges only to the service principal.