We have a customer that would like to make sure that certain tables are not tampered with by their DBAs for compliance reasons.
From my understanding their DBAs either do have or are able to run with sysadmin permissions, so I feel with any level of auditing or triggers, this will not be possible as they can 'tamper' with any auditing methods.
Is there a way to guarantee a sysadmin does not tamper with records (beyond not granting sysadmin) or to monitor any modifications without compromise?
Thanks in advance
