...
If you are auditing a virtual SQL Server, configure privileged user audit settings after you have deployed the SQLcompliance SQL Compliance Manager Agent to each cluster node hosting the server. Use the Cluster Configuration Console to deploy and configure the SQLcompliance SQL Compliance Manager Agent. For more information about installing and configuring the SQLcompliance SQL Compliance Manager Agent for a virtual SQL Server, see Audit a virtual SQL Server instance.
If you are auditing a SQL Server instance running in a non-trusted domain or workgroup, configure privileged user audit settings after you have deployed the SQLcompliance SQL Compliance Manager Agent to the computer hosting the instance.
Image Added
Available actions
Add
Allows you to select one or more privileged users to audit. You can select privileged users by login name or by membership to a server role.
...
Allows you to remove the selected SQL Server login or server role from the list of audited privileged users. If you remove the login or role, the SQLcompliance SQL Compliance Manager Agent will continue collecting events recorded for that login or the role members when these events belong to an audited event category. For example, if you are auditing DML events, any DML event initiated by a privileged user will be included in your audit trail.