We have a database audit spec with these three audit actions:
ADD (DATABASE_OBJECT_ACCESS_GROUP),
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
ADD (AUDIT_CHANGE_GROUP)
Our database has 250 tables in it. We chose to use database_object_access_group instead of auditing specific tables. However, now we would like to exclude two specific tables from the audit. We could list all of the tables (but 2) in the audit. However, if we add a new table to the DB, I am afraid we will forget to add the new table to the audit.
Is there a good (a.k.a. simple) way of auditing user access to all but 2 tables (including newly added tables)?