SQL Server Audit Action Group: SERVER_ROLE_MEMBER_CHANGE_GROUP

This group tracks membership additions and removals on server roles.

This group is only available in server audit specifications since it applies to server level objects only.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24016	Add member to server role succeeded
24017	Add member to server role failed
24018	Remove member from server role succeeded
24019	Remove member from server role failed

 

Upcoming Webinars Anatomy of a Cloud Hack: The Cloudflare/Okta Compromise – A Story of Tokens, Lateral Movement, Persistence and the Salvation of Zero Trust and Hard MFA Tokens

Additional Resources

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard