A public-health steward must give one auditor temporary access to use a clinic staging schema without elevating them to metastore administrator. What should they grant?

Temporary auditor access to a clinic staging schema should be a scoped Unity Catalog grant—GRANT USE SCHEMA (and any needed SELECT on staging tables) to that individual user for the audit window—not metastore-wide power. USE SCHEMA is the visitor badge to the staging hallway: enough to enter and work within that schema's grants without altering every health catalog object. Public-health stewards should time-box the grant and revoke after the engagement.

Making the auditor a metastore admin elevates them to alter any securable in the metastore—gross overkill for a staging review. Sharing one service principal secret with the auditor and all clinic engineers destroys accountability and secret hygiene. Copying the staging schema to a personal unmanaged folder with no audit trail removes governance precisely when an audit needs it.

Exam caveat: USE SCHEMA alone may not suffice without table SELECT; grant the minimum set required for the audit procedures. Prefer group grants for standing roles; individual user grants are appropriate for break-glass/temporary access when tracked. Operational check: grant USE SCHEMA (plus needed SELECT) to the auditor, confirm they can query staging, confirm they cannot DDL production health catalogs, set a calendar revoke, and capture SHOW GRANTS evidence for the audit file.