Let me state my position from the outset: Favoring AD Groups for security in SQL Server over individual AD Logins is a mistake. I don’t care what the “best practice” is. It’s a headache with no discernible advantage.
permission
http://msdn.microsoft.com/en-us/library/ms190310.aspx Returns a report that has information about user permissions for an object, or statement permissions, in the current database. See Microsoft link above for complete capabilities.