SQL Server Audit Action Group: SERVER_PERMISSION_CHANGE_GROUP

Available in		New to:
Database Audit Specification	Server Audit Specification	2012	2016
	•

This group tracks permission changes to the server ("instance") itself.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24158	Grant server permissions succeeded
24159	Grant server permissions failed
24160	Grant server permissions with grant succeeded
24161	Grant server permissions with grant failed
24162	Deny server permissions succeeded
24163	Deny server permissions failed
24164	Deny server permissions with cascade succeeded
24165	Deny server permissions with cascade failed
24166	Revoke server permissions succeeded
24167	Revoke server permissions failed
24168	Revoke server permissions with grant succeeded
24169	Revoke server permissions with grant failed
24170	Revoke server permissions with cascade succeeded
24171	Revoke server permissions with cascade failed

Upcoming Webinars

Shining a Light on the Hidden Risks of Non-Human Identities

Additional Resources

Audit Policy

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard

User name:
Password:
	/ Forgot?
	Register

April 2025 Patch Tuesday	"Patch Tuesday - One Zero Day! " - sponsored by LOGbinder

Follow @randyfsmith

About | Newsletter | Contact

Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2025 Monterey Technology Group, Inc. All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.