Sql_Servers_Administrators_Delete_Microsoft Azure_General

Event

Sql Servers Administrators Delete (Microsoft.Sql/servers/administrators/delete)

SK4 unified event:
Connector/Service

Microsoft Azure/General

SK4 Version:

2.3.85

Created Date:

Mon Dec 31 2018 13:58:53 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:13:18 GMT+0000 (Coordinated Universal Time)

Category

Privilege Management

Description

The SQL server administrator has been deleted.

Search query

cef_vendor="skyformation" cef_name="resource-acl-updated" destinationServiceName="Azure" sourceServiceName="azure" fileType="sql-server" act="removed" request="Success"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources