Permissions changes on dashboards, genie and folders

[cj_guz]

I'm trying to identify events in the audit logs that correspond to granting permissions for dashboards, genie spaces, and folders. Based on the documentation, my understanding is that I should be looking for the following:

• serviceName: 'unityCatalog'

• actionName: 'updatePermissions'

• A filter on request_params.securable_type with values like 'DASHBOARD' or 'DIRECTORY'.

However, when I query our system.access.audit table, the securable_type key doesn't seem to be present in the request_params field for these events. Has anyone had any experience locating these specific permissions changes?

[cj_guz]

Found most of this data in service_name = 'workspace' and action_name = 'changeWorkspaceAcl', however Genie Space permissions changes were not available.

[SP_6721]

Hi @cj_guz ,

Have you tried action_name='updateSpace'?