MS SQL Server Audit Event: 24226
SQL » 24226: Issued revoke application role permissions with grant command

24226: Issued revoke application role permissions with grant command

An application role is a database principal that can be assigned its own set of permissions. When a user connects to the database through those applications, they will be granted the role's permissions and their default user permissions will get overridden by those assigned to the application role. Event 24226 occurs when a command to revoke application role permissions (including the privilege to assign permissions to other users) from a user has been issued. It is generated by the DATABASE_OBJECT_PERMISSION_CHANGE_GROUP action group. Important information can be derived from this event including the:

  • Date and time at which the event occurred.
  • Session identifier of the event.
  • Privileged user who performed the action.
  • Server and database associated with the event.
  • ID, name, and permission bitmask of the target object (in this case, the application role).

MS SQL Server Auditing Tool

EventLog Analyzer is a comprehensive log management software with which you can centrally collect, analyze, and manage logs from all the different log sources in your network. You also get reports and alerts on your network security, making it a power-packed IT security tool.

Thank you.

Our support team will contact you shortly.

Manage your logs effortlessly using EventLog Analyzer.

  • Enter your email id
    Please enter a valid email id
  • Enter your phone number
  • Select demo date
  • By clicking 'Schedule a personalized demo', you agree to processing of personal data according to the Privacy Policy. You can unsubscribe from our mails at anytime.
SQL Auditing & Reporting
Application Auditing & Reporting
Log Management