SQL Server Audit Action Group: DATABASE_PRINCIPAL_CHANGE_GROUP

Available in New to:
Database
Audit
Specification 		Server
Audit
Specification 		2012 2016
• •  

This group tracks the creation modification or deletion of database principles which include database users, database roles and application roles.

If you enable this group in a server audit specification, it will track changes to principles in all databases within that SQL Server instance. If you enable this group inside a database audit specification, it will only track changes to principles within that particular database.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID Description
24121 Issued a create database user command
24122 Issued a change database user command
24123 Issued a delete database user command
24124 Issued a create database role command
24125 Issued a change database role command
24126 Issued a delete database role command
24127 Issued a create application role command
24128 Issued a change application role command
24129 Issued a delete application role command
24130 Issued a change database user login command
24131 Issued an auto-change database user login command

 

Upcoming Webinars
    Additional Resources