Audit store and audit store database permissions

Audit store permissions allow users or groups to modify different aspects of an audit store or audit store database. By default, the Master Auditor and the audit store database administrator have Full Control over the audit store and its database and can assign the following permissions to other users and groups:

This permission Enables trustees to do this

Full Control

Perform all administrative tasks on the selected audit store database and assign permissions to other users and groups.

Change Permissions

Add, modify, or remove Active Directory users and groups that have specific permissions.

A user or group granted this permission can display the properties for the audit store, then click the Security tab to select permissions for other users and groups.

Modify Name

Modify the name displayed for the selected audit store.

A user or group granted this permission can display the properties for the audit store, then click the General tab to change the audit store name.

Manage Scopes

Add, modify, or remove sites or subnets for the audit store.

A user or group granted this permission can display the properties for the audit store, then click the Scope tab to add or remove sites and subnets.

Manage SQL Logins

Add or remove the allowed incoming collectors and management database logins for the selected audit store database.

A user or group granted this permission can display properties for the audit store database, then click the Advanced tab to add or remove accounts for collectors and management databases.

Manage Collectors

Add, modify, or remove trusted collectors for the audit store.

A user or group granted this permission can display properties for the audit store, then click the Advanced tab to add or remove accounts trusted collectors.

Manage Audited Systems

Add, modify, or remove trusted audited computers for the audit store.

A user or group granted this permission can display properties for the audit store, then click the Advanced tab to add or remove accounts trusted audited computers.

Manage Databases

Add, attach, detach, or delete audit store databases for the selected audit store.

Manage Database Trace

Enable, disable, or export database traces for the selected audit store.