SQL Server Audit Log Event ID 24218
24218: Issued revoke database role permissions command (action_id R class_type RL)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command to revoke permissions to a database role was issued
Free Security Log Resources by Randy
| Field | Description |
|---|
| Occurred | When event was reported by SQL Server |
| Authorization result | If the command passed authorization checks |
| Session ID | ID of the session on which the event occurred |
| User | |
| Server | |
| Database | Database affected by the event |
| Target object | |
| | ID | Target object ID |
| | Name | Target object name |
| | Permission bitmask | Target object permission bitmask |
| Statement | Transact-SQL statement |
Supercharger Free Edition
Your entire Windows Event Collection environment on a single pane of glass.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Issued revoke database role permissions command
A command to revoke permissions to a database role was issued
Action Group: DATABASE_OBJECT_PERMISSION_CHANGE_GROUP
Occurred: 8/22/2013 6:07:51.0000000 PM
Authorization result: Access allowed
Session ID: 67
User: LB\Administrator
Server: DEV3
Database: TestDatabase
Target Object
ID: 8
Name: TestDBRole
Permission bitmask: System.Byte[]
Statement: REVOKE ALTER ON ROLE::[TestDBRole] TO [TestUser2]
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24218
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection