Which statement best summarises how permissions should be set in watsonx.data?
Select an answer to reveal the explanation.
Short Explanation
You should grant only the data and operations a role needs, enforce that in the access control layer, and review it as needs change. Broad grants, naming habits, or reporting-layer-only controls leave data exposed.
Full Explanation
The best summary is least privilege scoped to role, enforced centrally in the access control layer so every engine and interface is subject to it, and maintained over time as responsibilities change. Granting broadly at first is incorrect because it exposes data first, and nobody reports access they should not have, so the correction never comes. Relying on object naming and team convention is incorrect because naming and convention are not enforcement, produce no audit evidence, and fail as soon as someone browses the catalog. Applying permissions only at the reporting layer is incorrect because reporting-layer controls cover one path while leaving direct query access unrestricted. For the exam, hold the three parts together: least privilege, central enforcement, ongoing review.