Azure sql auditing scripts and new cosmos role for _pim_cosmos_ users #98329 #98330 #98328 #98681

SQL/Auditing/sqlserver01test.sql

@@ -0,0 +1,656 @@
+use master
+go
+
+CREATE CREDENTIAL [https://sqlauditlogeffectory.blob.core.windows.net/sqlserver01test]
+WITH IDENTITY='SHARED ACCESS SIGNATURE',
+SECRET = 'xxxxxx'
+GO
+
+CREATE SERVER AUDIT [SQLSERVER01_SERVER_AUDIT] TO URL ( PATH ='https://sqlauditlogeffectory.blob.core.windows.net/sqlserver01test' , RETENTION_DAYS = 365)
+GO
+
+ 
+-- Create server specification
+CREATE SERVER AUDIT SPECIFICATION [SQLSERVER01_SERVER_AUDIT_SPEC]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+   ADD (FAILED_LOGIN_GROUP),
+   ADD (LOGOUT_GROUP),
+   ADD (SUCCESSFUL_LOGIN_GROUP)
+   WITH (STATE=ON);
+GO
+ 
+-- Set state on
+ALTER SERVER AUDIT [SQLSERVER01_SERVER_AUDIT] WITH (STATE = ON);
+GO
+
+USE [ChangeLog]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [ChangeLog_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [ChangeLog_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory CM]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_CM_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_CM_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Communication]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Communication_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Communication_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Live]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Live_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Live_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Project]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Project_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Project_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Questionbase]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+----------------------------
+
+
+
+
+USE [Effectory Response Center]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Response MRT import]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Response Queue]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [esm_wh]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [esm_wh_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [esm_wh_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [ktv_wh_REMOVEAFTER202310]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [ktv_wh_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [ktv_wh_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [mgtinfo_REMOVEAFTER202402]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [mgtinfo_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [mgtinfo_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [MRT Reporting Data]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+
+USE [Personeelsadministratie]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [PMSoftware]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [PMSoftware_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [PMSoftware_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Teleform109]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform109_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform109_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+