Question 9

You own (have CAN MANAGE on) a shared classic all-purpose compute resource in an Azure Databricks workspace. You must grant the minimum compute permission level to three personas so each can do exactly their job and nothing more: - **Persona 1 — Analyst:** Must be able to attach notebooks to the compute and view the Spark UI / compute metrics, but must NOT be able to start, restart, terminate, edit, or resize the compute. - **Persona 2 — On-call engineer:** Must be able to start, restart, and terminate the compute (in addition to attaching), but must NOT be able to edit the configuration, resize it, or modify its permissions. - **Persona 3 — Compute owner:** Must be able to edit compute details, resize it, attach libraries, and modify permissions. For each persona, select the minimum compute ACL permission level. ```mermaid flowchart TD subgraph Hotspot["Assign minimum compute permission per persona"] P1["Analyst: attach + view Spark UI/metrics only"] --> D1{{"CAN ATTACH TO / CAN RESTART / CAN MANAGE"}} P2["On-call engineer: start/restart/terminate + attach"] --> D2{{"CAN ATTACH TO / CAN RESTART / CAN MANAGE"}} P3["Compute owner: edit, resize, attach libraries, modify permissions"] --> D3{{"CAN ATTACH TO / CAN RESTART / CAN MANAGE"}} end ```