Audit action group

In the Ultra Transcenders books

SC-500

Each book explains Audit action group in context, with comparison tables and the common traps.

Terms in this definition

• Audit

  Policy effect that lets a request proceed but flags the resource as non-compliant and logs a warning to the activity log. Microsoft suggests beginning there and later moving to something enforcing, like Deny.

• Exclusions

  Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.

• Auditing

  Azure SQL capability that sends database audit logs to Log Analytics, Event Hubs or a storage account; that account is allowed to be in a different region.

• Schema

  The middle part of a Unity Catalog name (catalog.schema.table), grouping tables, views, volumes, functions and models inside a catalog. A grant on it covers everything in it now and later, and nothing inside can be reached without USE SCHEMA.

• Authentication

  Checking an identity claim made by a person, device or app, for instance by asking for a password plus an extra factor. Authorisation only happens once this step has succeeded.

Related terms

• BATCH_COMPLETED_GROUP

  Audit action group in Azure SQL that logs the full text of each query batch and stored procedure once it completes; it belongs to the recommended auditing configuration.

• FAILED_DATABASE_AUTHENTICATION_GROUP

  Captures unsuccessful attempts to log in to a database. This database-scoped audit action group is among those recommended for Azure SQL.

• SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP

  Audit action group at database level that logs successful database logins; it belongs to the recommended set for Azure SQL auditing.

• SUCCESSFUL_LOGIN_GROUP

  Audit action group at SQL Server level that logs successful logins to the instance. It is not among the groups recommended for Azure SQL Database.