Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Trusted users are SQL Server logins and members of SQL Server roles that you trust to read, update, or manage a particular audited database. The IDERA SQL Compliance Manager Agent removes events generated by trusted users from the audit trail before sending the trace file to the Collection Server for processing.

By designating trusted users, you can more efficiently audit databases used by third-party applications, such as SAP, that are self-auditing. selfSelf-auditing applications are able to audit activity and transactions initiated by their service accounts. Because service accounts can generate a significant number of login and database change events, omitting these expected events from your audit data trail lets you more easily identify unexpected activity.

...

If you are auditing privileged user activity and the trusted user is also a privileged user, SQL CM Compliance Manager will continue to audit this user because of its elevated privileges. For example, a service account that is a member of the sysadmin fixed SQL Server role will continue to be audited even though the account is designated as trusted. Keep in mind that trusted users are filtered at the database level whereas privileged users are audited at the server level.

...

Allows you to designate a previously trusted SQL Server login or role as non-trusted. When a login or role becomes non-trusted, SQL CM Compliance Manager begins auditing database-level activity generated by this login or role, based on your current audit settings.

 

Excerpt
SQL Compliance Manager audits all activity on your server. Learn more > >