SQL Server Audit Log Event ID 24347

SourceSQL Server (LOGbinder SQL)
Action GroupDATABASE_OBJECT_PERMISSION_CHANGE_GROUP
Windows Security Log
Category
 • Subcategory
Object Access
 • Application Generated
Type Failure
Discussions on Event ID 24347

24347: Revoke permissions on a database scoped credential failed (action_id R; class_type DC)

This is an event from SQL Server audit event from LOGbinder SQL generated by Action Group  DATABASE_OBJECT_PERMISSION_CHANGE_GROUP.

On this page

Attempt to revoke permissions to a database scoped credential failed

Free Security Log Resources by Randy

Description Fields in 24347

Field Description
Occurred When event was reported by SQL Server.
Session ID ID of the session on which the event occurred.
User User
Server Server
Database Database affected by the event.
Target object  
  Name Target object name
  Permission bitmask Target object permission bitmask
Statement Transact-SQL statement

Supercharger Free Edition


Your entire Windows Event Collection environment on a single pane of glass.

Free.

 

Where Does This Event Come From?

This Event Is Produced By

Which Integrates with Your SIEM

Examples of 24347

Revoke permissions on a database scoped credential failed
Attempt to revoke permissions to a database scoped credential failed
Action Group: DATABASE_OBJECT_PERMISSION_CHANGE_GROUP
Occurred: 5/12/2018 3:42:14.0000000 AM
Session ID: 146
User: LAB\tuser
Server: LAB-SQL-13\SQLSERVER2017
Database: test
Target Object
  Name: n/a
  Permission bitmask: System.Byte[]
Statement: REVOKE ALTER; ON DATABASE SCOPED CREDENTIAL :: AppCred; FROM [xtest]

For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24347

Keep me up-to-date on the Windows Security Log.
Email*:
*We will NOT share this

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection



 

Additional Resources