The session must have MAINTAIN_AUDIT privilege.

To query the audit log, AUDITOR privilege is required.