Kenneth Fisher asks, who audits the auditors?:
I love database audits. They are simple, easy to use, effective, not overly resource intensive, and can be turned on and off at need once created. That said, they do have a few gotchas. If you want every user put public as the principal. And if you don’t, and you put in an AD user, be aware that if that user will be created (along with a matching schema) when you create the Database Audit Specification.
Read on for Kenneth’s experience and a way to clean up these potentially-added users.