Data Governance, Data Warehouse, Databricks, Databricks Sql, Data Observability.
audit.action_name = "updatePermissions" AND audit.request_params.securable_type in ("catalog", "schema", "table") AND audit.event_time > (current_timestamp() - INTERVAL 70 MINUTES) AND audit.response.status_code = 200 AND request_params.changes:[*].principal like "%@databricks.com%" -- org email