SQL Server Audit Action Group: SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP

This group tracks changes of ownership on schema objects such as a table, view or stored procedure.

This is an important audit action group because ownership changes are significant to the security of the system.

If you enable this group in a database audit specification, it will track ownership changes on schema objects within that database only. If you enable this group in a server audit specification, it will track ownership changes on schema objects in all databases within that SQL Server instance.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24155	Issued a change schema object owner command
24156	Issued a change schema type owner command
24157	Issued a change XML schema collection owner command

 

Upcoming Webinars Assessing the Security of Your Active Directory: User Accounts Anatomy of a Cloud Hack: The Cloudflare/Okta Compromise – A Story of Tokens, Lateral Movement, Persistence and the Salvation of Zero Trust and Hard MFA Tokens

Additional Resources

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard