SQL Server Audit Log Event ID 24347
        
        
        
        
        
    
    
    
    
        24347: Revoke permissions on a database scoped credential failed (action_id R; class_type DC)
    
    
        
            This is an event from 
            SQL Server
            audit event from
            LOGbinder SQL
            generated by
             
            .
        
    
    
        On this page
    
    
    Attempt to revoke permissions to a database scoped credential failed
Free Security Log Resources by Randy 
    
    
        
                    
    
        
            | Field | 
            Description | 
        
        
            | Occurred | 
            When event was reported by SQL Server. | 
        
        
            | Session ID | 
            ID of the session on which the event occurred. | 
        
        
            | User | 
            User | 
        
        
            | Server | 
            Server | 
        
        
            | Database | 
            Database affected by the event. | 
        
        
            | Target object | 
              | 
        
        
            |   | 
            Name | 
            Target object name | 
        
        
            |   | 
            Permission bitmask | 
            Target object permission bitmask | 
        
        
            | Statement | 
            Transact-SQL statement | 
        
    
        
            
                Supercharger Enterprise 
                
                
                
             
        
    
 
    
	
        
            
            
                This Event Is Produced By
            
            
		
                
                    Which Integrates with Your SIEM
                
            
	 
         
    
 
    
        
        Revoke permissions on a database scoped credential failed
Attempt to revoke permissions to a database scoped credential failed
Action Group: DATABASE_OBJECT_PERMISSION_CHANGE_GROUP
Occurred: 5/12/2018 3:42:14.0000000 AM
Session ID: 146
User: LAB\tuser
Server: LAB-SQL-13\SQLSERVER2017
Database: test
Target Object
  Name: n/a
  Permission bitmask: System.Byte[]
Statement: REVOKE ALTER;     ON DATABASE SCOPED CREDENTIAL :: AppCred;     FROM [xtest]
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24347
        
            Top 10 Windows Security Events to Monitor
        
        
            Free Tool for Windows Event Collection