Different teams should only reach the models and tables they own. Where do you enforce this?
Why C is the answer
In Unity Catalog permissions
Unity Catalog governs access to data, models and functions in one place.
In detail
- Unity Catalog governs access to data, models and functions in one place.
- Permissions there are enforced, whatever a prompt says.
- Grant to groups rather than to individuals.
Use case
An illustrative scenario, not a real incident.
Finance and marketing share a workspace. Permissions in Unity Catalog mean each team reaches only its own tables and models, whatever an agent's prompt says.
See it in different ways
flowchart LR A["User input"] --> B["Input guardrail"] B --> C["LLM"] C --> D["Mask or filter output"] D --> E["User"]
mindmap
root((Governance))
Input
Guardrails
Output
Masking
Data
Licensing
Permissionsmindmap
root(("Unity Catalog"))
n1["Data"]
n2["Tables"]
n3["AI"]
n4["Models"]
n5["Functions"]
n6["Control"]
n7["Permissions"]Key point: Govern access in Unity Catalog, not in prompts.
Why the other options are wrong
- A. In a prompt instruction for each agent
- A prompt instruction is not an access control.
- B. In a naming convention for each team
- A naming convention controls nothing.
- D. In the title of each notebook
- A title is only a label.