Question 23

An automated CI/CD pipeline must connect to Azure Databricks without any interactive user sign-in and run jobs as a non-human identity. You decide to use **OAuth machine-to-machine (M2M)** authentication (the OAuth 2.0 client credentials flow) with an Azure Databricks service principal, then access data the principal is authorized for in Unity Catalog. Which TWO actions are required to configure OAuth M2M authentication for the service principal? (Choose TWO.)

• ACreate an Azure Databricks OAuth secret for the service principal and configure the client with `client_id` = the service principal's application (client) ID and `client_secret` = the OAuth secret value.
• BGrant the service principal the `SELECT` privilege on the required Unity Catalog data objects and `CAN USE` on the SQL warehouse it connects to.
• CGenerate a personal access token (PAT) for a human user and embed it in the pipeline so the service principal can reuse it.
• DEnable browser-based OAuth U2M consent and have an administrator approve each pipeline run interactively.
• EStore the service principal's Microsoft Entra ID client secret as the OAuth secret, because Entra ID secrets are interchangeable with Databricks OAuth secrets for M2M.