You are designing governance for several Databricks workspaces in the same cloud region. How would you centralize governance without forcing every engineering team into one workspace, and what would you use if a catalog must be visible only from selected workspaces?
Strong Interview Answer
I would attach the workspaces in that region to the same Unity Catalog metastore so they share governed metadata, permissions, and securable objects while retaining separate workspace development and compute choices. If a catalog must be isolated to specific workspaces, I would use workspace-catalog bindings rather than creating separate metastores just for workspace separation.
What to Listen For
- one metastore per region
- multiple workspaces per metastore
- centralized Unity Catalog governance
- workspace autonomy
- workspace-catalog bindings
Caution
A strong answer should separate regional metastore scope from workspace-level isolation and should not propose one metastore per notebook or team.