Query User Role and Group Membership with SQL

Author: Joyce Zhou

Introduction

In a production environment, User membership can get complicated due to nested User Groups. To assis with this, you can add a new function to the environment with the following script:

CREATE FUNCTION [dbo].[fnGetAllUsersAffiliations] 
(
)
RETURNS @ret TABLE 
(
UserID bigint NOT NULL,
ParentID bigint NOT NULL
)

AS
begin
WITH Ancestors([ID],[ParentID],[Sequence],[UserID0],[Path]) AS 
(

SELECT 
[ID] = ur.UserID,
[ParentID] = ua.Affiliation,
[Sequence] = 0,
uu.[UserID],
[Path] = cast(N'/' as nvarchar(4000)) + cast(ur.UserID as nvarchar(4000)) + cast(N'/' as nvarchar(4000))
FROM dbo.Users ur
inner join dbo.UserAffiliations ua
on ur.UserID=ua.UserID and ur.Deleted <> 1
inner join dbo.Users uu on ur.UserID = uu.UserID
where (uu.[Type]=dbo.fnConstants('Users','regular') or uu.[Type] = dbo.fnConstants('Users','custom'))


UNION ALL


SELECT 
[ID] = ur.UserID,
[ParentID] = ua.Affiliation,
[Sequence] = [Sequence] + 1,
CTE.[UserID0],
[Path] = CTE.[Path] + cast(ur.UserID as nvarchar(4000)) + cast(N'/' as nvarchar(4000))
FROM Ancestors AS CTE, 
dbo.Users ur
inner join dbo.UserAffiliations ua
on ur.UserID=ua.UserID and ur.Deleted <> 1
WHERE CTE.[ParentID] = ur.UserID
and (CTE.[Path] not like cast(N'%/' as nvarchar(4000)) + cast(ur.UserID as nvarchar(4000)) + cast(N'/%' as nvarchar(4000)))
)

INSERT @ret
SELECT distinct [UserID0], ParentID FROM Ancestors
where [UserID0] <> [ParentID]

INSERT @ret
SELECT distinct UserID, UserID FROM dbo.Users where 
([Type]=dbo.fnConstants('Users','regular') or [Type] = dbo.fnConstants('Users','custom'))
and Deleted <> 1

return

end

Example

Once this function exists, the following query gives an overview of the mapping of all Users and User Groups.

SELECT F.UserID
    ,U.UserName
    ,F.ParentID
    ,R.UserName [ParentName]
FROM fnGetAllUsersAffiliations() F
INNER JOIN Users U
ON F.UserID = U.UserID 
INNER JOIN Users R
ON F.ParentID = R.UserID 
WHERE F.UserID <> F.ParentID

Here is a sample result. Please note, this result has unfolded all of the nested User Group relationships.