Audit Schema & Permission Changes

Log Explorer offers the ability to browse and act upon DDL commands, such as transactions that make changes to database schema and permissions. This can be valuable in identifying the origin and timing of changes to the database that could compromise integrity or security. Let’s use the “View DDL Commands” function to look at changes made to schema and permissions:

  1. Switch to Log Explorer and select ‘View DDL Commands” from the left-hand toolbar.
  2. Read any new transactions that have recently appeared in the log by selecting the Refresh button.
  3. Browse this view and click on the SP_GRANTDBACCESS command.
  4. This transaction granted the login 'Demo_Login' access to the database.
  5. Continue browsing and click on the ALTER_TABLE command.
  6. This transaction altered the table 'employee' by adding the new column 'years'.

Log Explorer allows you to create Undo and Redo SQL scripts for many DDL commands, and salvage dropped tables directly from this view.

 

Click 'Next' to continue.