SQL Server Audit Action Group: SERVER_PRINCIPAL_CHANGE_GROUP

Available in New to:
Database
Audit
Specification
Server
Audit
Specification
2012 2016
   

This group tracks the creation modification or deletion of server principles which include logins and server roles.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID Description
24075 Issued a create server principal command
24076 Issued a delete server principal command
24077 Issued a change server principal credentials command
24078 Issued a disable server principal command
24079 Issued a change server principal default database command
24080 Issued an enable server principal command
24081 Issued a change server principal default language command
24082 Issued a change server principal password expiration command
24083 Issued a change server principal password policy command
24084 Issued a change server principal name command
24288 Issued a create user-defined server role command
24289 Issued a change user-defined server role command
24290 Issued a delete user-defined server role command

 

Additional Resources