Allowing specific non-sysadmin users to query group membership for a login
I had a lot of good feedback about my post the other day about how to query group membership for a given login.
One tricky question was about how you could let a specfic user be able to find the group membership for another login, without the user being a sysadmin to run the code. Doing that is a bit trickier but can be done by creating a certificate, a login from the certificate, then assigning permissions to that login, and finally applying a digital signature to the procedure using the certificate.
2014-11-19