Data Governance, Data Warehouse, Databricks, Databricks Sql, Data Observability.
audit.action_name = 'updatePermissions' AND audit.event_time > (current_timestamp() - INTERVAL 70 MINUTES) AND audit.response.status_code = 200 AND audit.request_params.changes:[*].add is not null Just like in the last setup, we can create an alert for this query which triggers whenever any access