AuditActionType AuditActionType AuditActionType Enum

Definition

Specifies the type of action for SQL Server audit events.

public enum class AuditActionType
public enum AuditActionType
Public Enum AuditActionType
Inheritance
AuditActionTypeAuditActionTypeAuditActionType

Fields

ApplicationRoleChangePasswordGroup ApplicationRoleChangePasswordGroup ApplicationRoleChangePasswordGroup 0

The ApplicationRoleChangePasswordGroup action occurs whenever a password is changed for an application role.

AuditChangeGroup AuditChangeGroup AuditChangeGroup 1

The AuditChangeGroup action occurs whenever any audit or audit specification is created, modified, or deleted. Any change to an audit is audited in the same audit.

BackupRestoreGroup BackupRestoreGroup BackupRestoreGroup 2

The BackupRestoreGroup action occurs whenever a backup or restore operation is performed.

BrokerLoginGroup BrokerLoginGroup BrokerLoginGroup 3

The BrokerLoginGroup action occurs when any Service Broker login operation is performed.

DatabaseChangeGroup DatabaseChangeGroup DatabaseChangeGroup 4

The DatabaseChangeGroup action occurs when a database is created, altered, or dropped. At the server scope, this action occurs whenever any database is created, altered, or dropped.

DatabaseLogoutGroup DatabaseLogoutGroup DatabaseLogoutGroup 5

The DatabaseLogoutGroup action type.

DatabaseMirroringLoginGroup DatabaseMirroringLoginGroup DatabaseMirroringLoginGroup 6

The DatabaseMirroringLoginGroup action occurs when any database mirroring operation is performed.

DatabaseObjectAccessGroup DatabaseObjectAccessGroup DatabaseObjectAccessGroup 7

The DatabaseObjectAccessGroup action occurs whenever database objects are accessed, such as certificates and asymmetric keys. At the server scope, this action occurs for any object accessed in any database. This can lead to very large audit records.

DatabaseObjectChangeGroup DatabaseObjectChangeGroup DatabaseObjectChangeGroup 8

The DatabaseObjectChangeGroup action occurs when a CREATE, ALTER, or DROP statement is executed on database objects such as schemas. At the server scope, the action occurs whenever any database object is created, altered, or dropped. This can lead to very large quantities of audit records.

DatabaseObjectOwnershipChangeGroup DatabaseObjectOwnershipChangeGroup DatabaseObjectOwnershipChangeGroup 9

The DatabaseObjectOwnershipChangeGroup action occurs when a change of owner for objects within the database scope occurs. At the server scope, this action occurs for any object ownership change on any database.

DatabaseObjectPermissionChangeGroup DatabaseObjectPermissionChangeGroup DatabaseObjectPermissionChangeGroup 10

The DatabaseObjectPermissionChangeGroup action occurs when a GRANT, REVOKE, or DENY statement is issued for database objects, such as assemblies or schemas. At the server scope, this action occurs for any object permission change for any database.

DatabaseOperationGroup DatabaseOperationGroup DatabaseOperationGroup 11

The DatabaseOperationGroup action occurs when operation in a database such as checkpoint or subscribe query notification occur. At the server scope, this action occurs on any database action on any database.

DatabaseOwnershipChangeGroup DatabaseOwnershipChangeGroup DatabaseOwnershipChangeGroup 12

The DatabaseOwnershipChangeGroup action occurs when the ALTER AUTHORIZATION statement is used to change the owner of a database and the permissions required to do that are checked. At the server scope, this action occurs for any database ownership change on any database.

DatabasePermissionChangeGroup DatabasePermissionChangeGroup DatabasePermissionChangeGroup 13

The DatabasePermissionChangeGroup action occurs whenever a GRANT, REVOKE, or DENY statement is issued for a statement permission by any user within the scope of the database. At the server scope, this action occurs for any database permission change for any database.

DatabasePrincipalChangeGroup DatabasePrincipalChangeGroup DatabasePrincipalChangeGroup 14

The DatabasePrincipalChangeGroup action occurs when principals such as users, are created, altered, or dropped from a database. At the server scope, this action occurs whenever any database principals are created, altered, or dropped from any database.

DatabasePrincipalImpersonationGroup DatabasePrincipalImpersonationGroup DatabasePrincipalImpersonationGroup 15

The DatabasePrincipalImpersonationGroup action occurs when there is an impersonation within the database scope, such as the EXECUTE AS statement executed on a user.

DatabaseRoleMemberChangeGroup DatabaseRoleMemberChangeGroup DatabaseRoleMemberChangeGroup 16

The DatabaseRoleMemberChangeGroup action occurs whenever a login is added to or removed from a database role. This action is generated by the sp_addrolemember, sp_changegroup, and sp_droprolemember stored procedures. At the server scope, it is generated for any database role member change to any database.

DbccGroup DbccGroup DbccGroup 17

The DbccGroup action occurs whenever a DBCC command is issued.

Delete Delete Delete 18

The Delete action occurs whenever a DELETE command is issued.

Execute Execute Execute 19

The Execute action occurs whenever an EXECUTE command is issued.

FailedDatabaseAuthenticationGroup FailedDatabaseAuthenticationGroup FailedDatabaseAuthenticationGroup 20

The FailedDatabaseAuthenticationGroup action type.

FailedLoginGroup FailedLoginGroup FailedLoginGroup 21

The FailedLoginGroup action indicates that a user tried to log in to the instance of SQL Server and failed. Events in this class are fired by new connections or connection that are reused from the connection pool.

FullTextGroup FullTextGroup FullTextGroup 22

The FulltextGroup action indicates that there is a named pipe connection between the SQL Full-text Filter Daemon Launcher/Filter Daemon and the instance of SQL Server. Events in this class are fired by success or failure of new connections.

GlobalTransactionsLoginGroup GlobalTransactionsLoginGroup GlobalTransactionsLoginGroup 23

The GlobalTransactionsLoginGroup action type.

Insert Insert Insert 24

The Insert action occurs whenever an INSERT command is issued.

LoginChangePasswordGroup LoginChangePasswordGroup LoginChangePasswordGroup 25

The LoginChangePasswordGroup action occurs whenever a login password is changed by using the ALTER LOGIN or the Alter() method.

LogoutGroup LogoutGroup LogoutGroup 26

The LogoutGroup action indicates that a user has logged out of the instance of SQL Server. Events in this class are fired by new connections or connections that are reused from the connection pool.

Receive Receive Receive 27

The Receive action occurs whenever a RECEIVE command is issued.

References References References 28

The References action occurs whenever a REFERENCES permission is checked.

SchemaObjectAccessGroup SchemaObjectAccessGroup SchemaObjectAccessGroup 29

The SchemaObjectAccessGroup action occurs when a schema object is accessed. At the server scope, this action occurs whenever any schema object is accessed on any database.

SchemaObjectChangeGroup SchemaObjectChangeGroup SchemaObjectChangeGroup 30

The SchemaObjectChangeGroup action occurs when a CREATE, ALTER, or DROP statement is issued on schema objects, such as tables or views. At the server scope, this action occurs whenever any schema of any database object changes.

SchemaObjectOwnershipChangeGroup SchemaObjectOwnershipChangeGroup SchemaObjectOwnershipChangeGroup 31

The SchemaObjectOwnershipChangeGroup action occurs when the permissions to change the owner of schema object, such as a table or a view, are selected. This action occurs when the ALTER AUTHORIZATION statement is used to assign an owner to an object. At the server scope, this action occurs for any schema ownership change for any database.

SchemaObjectPermissionChangeGroup SchemaObjectPermissionChangeGroup SchemaObjectPermissionChangeGroup 32

The SchemaObjectPermissionChangeGroup action occurs whenever a GRANT, REVOKE, or DENY statement is issued on a schema object.

Select Select Select 33

The Select action occurs whenever a SELECT command is issued.

ServerObjectChangeGroup ServerObjectChangeGroup ServerObjectChangeGroup 34

The ServerObjectChangeGroup action occurs when a CREATE, ALTER, or DROP statement is issued for any server object.

ServerObjectOwnershipChangeGroup ServerObjectOwnershipChangeGroup ServerObjectOwnershipChangeGroup 35

The ServerObjectOwnershipChangeGroup action occurs when the owner is changed for objects in the server scope.

ServerObjectPermissionChangeGroup ServerObjectPermissionChangeGroup ServerObjectPermissionChangeGroup 36

The ServerObjectPermissionChangeGroup action occurs whenever a GRANT, REVOKE, or DENY statement is issued for a server object permission by any user.

ServerOperationGroup ServerOperationGroup ServerOperationGroup 37

The ServerOperationGroup action occurs when security audit operations, such as altering settings, resources, external access, or authorization, are used.

ServerPermissionChangeGroup ServerPermissionChangeGroup ServerPermissionChangeGroup 38

The ServerPermissionChangeGroup action occurs when a GRANT, REVOKE, or DENY statement is issued for permission in the server scope, such as creating a login.

ServerPrincipalChangeGroup ServerPrincipalChangeGroup ServerPrincipalChangeGroup 39

The ServerPrincipalChangeGroup action occurs when server principals are created, altered, or dropped. This action is generated by the sp_defaultdb, sp_defaultlanguage stored procedures, and the ALTER LOGIN statement.

ServerPrincipalImpersonationGroup ServerPrincipalImpersonationGroup ServerPrincipalImpersonationGroup 40

The ServerPrincipalImpersonationGroup action occurs when there is an impersonation within the server scope, such as an EXECUTE AS statement executed on a login.

ServerRoleMemberChangeGroup ServerRoleMemberChangeGroup ServerRoleMemberChangeGroup 41

The ServerRoleMemberChangeGroup action occurs whenever a login is added or removed from a fixed server role. This action is generated by sp_addsrvrole and sp_dropsrvrolemember stored procedures.

ServerStateChangeGroup ServerStateChangeGroup ServerStateChangeGroup 42

The ServerStateChangeGroup action occurs when the SQL Server service is modified.

SuccessfulDatabaseAuthenticationGroup SuccessfulDatabaseAuthenticationGroup SuccessfulDatabaseAuthenticationGroup 43

The SuccessfulDatabaseAuthenticationGroup action type.

SuccessfulLoginGroup SuccessfulLoginGroup SuccessfulLoginGroup 44

The SuccessfulLoginGroup action indicates that a user has successfully logged in to the instance of SQL Server. Events in this class are fired by new connections or by connections that are reused from the connection pool.

TraceChangeGroup TraceChangeGroup TraceChangeGroup 45

The TraceChangeGroup action occurs whenever a Trace operation is performed.

Update Update Update 46

The Update action occurs whenever an UPDATE command is issued.

UserChangePasswordGroup UserChangePasswordGroup UserChangePasswordGroup 47

The UserChangePasswordGroup action type.

UserDefinedAuditGroup UserDefinedAuditGroup UserDefinedAuditGroup 48

The UserDefinedAuditGroup action.

Remarks

The AuditActionType enumeration class is served by the Action property.

Applies to