Capture Security Changes, GRANT, DENY, REVOKE, ADD/DROP ROLE

• Welsh Corgi

  SSC Guru

  Points: 116520

  More actions

  November 20, 2012 at 10:36 am

  #270415

  What are the best option to capture changes to security?

  A trigger, profiler or what?

  Thanks.

  For better, quicker answers on T-SQL questions, click on the following...
  http://www.sqlservercentral.com/articles/Best+Practices/61537/

  For better answers on performance questions, click on the following...
  http://www.sqlservercentral.com/articles/SQLServerCentral/66909/

• GSquared

  SSC Guru

  Points: 260824

  More actions

  November 20, 2012 at 12:25 pm

  #1560977

  I'd use a DDL trigger for that.

  Details here: http://msdn.microsoft.com/en-us/library/ms175941.aspx

  Events available for them to fire on: http://msdn.microsoft.com/en-us/library/62ef24b4-3553-4aed-b62a-670980bae501

  - Gus "GSquared", RSVP, OODA, MAP, NMVP, FAQ, SAT, SQL, DNA, RNA, UOI, IOU, AM, PM, AD, BC, BCE, USA, UN, CF, ROFL, LOL, ETC
  Property of The Thread

  "Nobody knows the age of the human race, but everyone agrees it's old enough to know better." - Anon