Log for login privileges

  • Hi Friends,

    Let us assume that I have created a login named XXXX and given db_owner privileges a month ago. The user complained that he is unable to create the table or drop the table in that particular database. When I cross-checked, login privileges was changed from db_owner to db_datareader. Is there any way to find which user has changed the privileges?

    Thanks in advance.

  • Yes, there are a number of ways you can audit this:

    1) SQL Server Audit (which requires Enterprise Edition)

    2) DDL triggers.

    3) Event notifications.

    If you mean how you could find out after-the-fact without having anything set up, your prospects are paler. It may be recorded in the default trace, but this data is not kept for any longer time.

    [font="Times New Roman"]Erland Sommarskog, SQL Server MVP, www.sommarskog.se[/font]

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply