Audit queries by permissions required

Question

Is there a way to "audit" queries by the permissions they require to run? For example I want to capture every query that requires the "VIEW SERVER STATE" permission to run.

Answer 1

Hi @Hamilton, Chuck

I want to capture every query that requires the "VIEW SERVER STATE" permission to run.

Permissions in the Database Engine are managed at the server level assigned to logins and server roles, and at the database level assigned to database users and database roles.

Best regards,

Cosmog Hong

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our Documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I don't think there is anything built-in for this. You could set up a trace/X-event statement that is filtered for things that requires VIEW SERVER STATE, but that would take some time to get right. And technically not entirely possible. Anyone can query sys.dm_exec_sessions, but if you don't have VIEW SERVER STATE, you only see your own process.