When you ran the job, was your data_security/access mode set to Dedicated/Single-User or Standard/Shared.

I assume it was the former. If it's the latter, you wouldn't have need to give that permission.

You would get the same experience trying to do a simple SELECT of that same table set up through Lakehouse Federation and trying to query it from a dedicated vs standard access model cluster.

https://docs.azure.cn/en-us/databricks/query-federation/database-federation#limitations

See last limitation. Manage is giving you pseudo-Owner to rise above that limitation. The reason is that the underlying privilege model is different for dedicated/single-user.