topic Re: service principal table accesses not showing up in system.audit in Administration & Architecture

service principal table accesses not showing up in system.audit

RonMoody — Tue, 21 Nov 2023 23:32:28 GMT

When we run jobs using service principals system.audit doesn't show any table accesses (getTable). Volume (getVolume) shows up for service principals.

Same query when run as a user shows up in system.audit.

I know system.audit is in public preview. Wondering if this is an known issue or I am missing something

Re: service principal table accesses not showing up in system.audit

RonMoody — Mon, 27 Nov 2023 16:59:50 GMT

hi @Retired_mod thanks so much for your reply !

I was referring to https://docs.databricks.com/en/administration-guide/system-tables/audit-logs.html which is part of databricks core offering and isn't related to ServiceNow's offering. I am assuming they are unrelated. Can you please clarify ?

Thanks Ron