service principal table accesses not showing up in system.audit

[RonMoody]

When we run jobs using service principals system.audit doesn't show any table accesses (getTable). Volume (getVolume) shows up for service principals. 

Same query when run as a user shows up in system.audit. 

I know system.audit is in public preview. Wondering if this is an known issue or I am missing something 

[RonMoody]

hi @Retired_mod thanks so much for your reply ! 

I was referring to https://docs.databricks.com/en/administration-guide/system-tables/audit-logs.html which is part of databricks core offering and isn't related to ServiceNow's offering. I am assuming they are unrelated. Can you please clarify ?

Thanks Ron