SQL Server Audit Log Event ID 24375
24375: Command to change permission failed (action_id D, DWC, G, GWG, R, RWC, RWG; class_type DC, EL)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
Attempt to change permission on a database object failed
Free Security Log Resources by Randy
Field |
Description |
Occurred |
When event was reported by SQL Server. |
Authorization result |
If the command passed authorization checks. |
Session ID |
ID of the session on which the event occurred. |
User |
User |
Server |
Server |
Database |
Database affected by the event. |
Target object |
|
|
ID |
Target object ID |
|
Name |
Target object name |
|
Permission bitmask |
Target object permission bitmask |
Statement |
Transact-SQL statement |
Supercharger Enterprise
This Event Is Produced By
Which Integrates with Your SIEM
Command to change permission failed
Attempt to change permission on a database object failed
Action Group: DATABASE_OBJECT_PERMISSION_CHANGE_GROUP
Occurred: 5/12/2018 3:42:21.0000000 AM
Authorization result: Access denied
Session ID: 146
User: LAB\tuser
Server: LAB-SQL-13\SQLSERVER2017
Database: master
Target Object
ID: n/a
Name: n/a
Permission bitmask: System.Byte[]
Statement: REVOKE GRANT OPTION FOR ALTER; ON DATABASE SCOPED CREDENTIAL :: AppCred; FROM [xtest] ;
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24375
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection