SQL: Allowing specific non-sysadmin users to query group membership for a login
I had a lot of good feedback on my recent post about how to query group membership for a given login.
One tricky additional question was about how you could let a specfic user be able to find the group membership for another login, without the user being a sysadmin to run the code.
Now doing that is a bit trickier but can be done by creating a certificate, a login from the certificate, then assigning permissions to that login, and finally applying a digital signature to the procedure using the certificate.
2026-06-07