@Debayan Mukherjee​ Thanks for your reply - but I don't think this help my case:

I want to let my app's users to be able to query over my databricks sql server, with prevention of editing data.

Statements like drop, insert, delete, update, truncate, etc... should not be allowed in that context.

Perhaps I did not fully understand your suggestion...

Thanks!