A single audit trail is collected during a single privilege check. However, in the exceptional cases shown in the following table, multiple audit trails are collected during a single privilege check.

Table 24-5 Event execution units and audit trail record output units

Events	Execution unit	Target output units	Number of output records
GRANT, REVOKE	User	User	Number of target users
	Role	Role	Number of target roles
CREATE CONNECTION SECURITY, DROP CONNECTION SECURITY	Setting value of the connection security facility	Setting values of the connection security facility	Number of setting values of the connection security facility

When multiple privilege checks occur in a single event, audit trails are output as follows:

• When any one of multiple privileges is required
  An audit trail is output during one of the privilege checks.
  

  Example

  To unload someone else's table, you must have either DBA privilege or SELECT privilege.

  Whether the DBA privilege check or the SELECT privilege check was successful is output in the audit trail.

• When all of multiple privileges are required
  Audit trails are output during all the privilege checks.
  

  Example

  To reorganize someone else's table, you must have the INSERT, DELETE, and SELECT privileges.

  If the INSERT, DELETE, and SELECT privilege checks are all successful, audit trails are output for all three checks. If an error occurs in midstream, audit trails are output for the successful privilege checks. Failure trails are output for the unsuccessful privilege checks.