This installment is part of the “Security Management” series of articles for SQL Server.
Find all group memberships, and their group memberships, all the way to the highest group/role/principle membership. This will be correlated and joined to another procedure (in an article to be published soon) together returning all granted and inherited protects on the SQL Server instance for every principle and every role/group.
Used in several areas e.g. compliance, general security auditing, baseline comparisons, security inquiries, deployment cleanups, etc.
Find all principles with memberships to groups/roles and memberships of those groups/roles all the way to the top principle:
Just a few example uses:
- Find all sysadmin members
- Find all db_datawriter memberships
- Find all memberships for a principle/group/role, etc.
- Audit all principle memberships against the approved baseline.
Click to read more ...