Permission to execute syslogins to non sysadmins, to list all the logins

Question

Hi All:
How can we grant the permission to non sysadmin user to pull the report of all the existing SA's on the server.
With Sysadmin role i m able to execute the query but when non-sysadmins are running they are not getting full result what i m seeing...
The following permission already granted on master DB:
1) Readonly, View server state, Execute and select permissions
Query:
select SL.name
from syslogins SL
INNER JOIN sys.server_principals SP
ON SL.name = SP.name
where SP.is_disabled <>1 and SL.sysadmin = 1
Thanks,
Thanks, Satish Kumar. Please mark as this post as answered if my anser helps you to resolves your issue :)

Answer 1

VIEW ANY DEFINITION should do, although I fail to see why you need to expose this information to non-sysadmin users. See repro with an improved query below:
CREATE LOGIN yngve WITH PASSWORD = 'malmsten'
go
EXECUTE AS LOGIN = 'yngve'
go
SELECT sp.name
FROM sys.server_principals sp
WHERE sp.is_disabled = 0
AND EXISTS (SELECT *
FROM sys.server_role_members mb
JOIN sys.server_principals sp2 ON mb.role_principal_id = sp2.principal_id
WHERE mb.member_principal_id = sp.principal_id
AND sp2.name = 'sysadmin')
go
REVERT
go
GRANT VIEW ANY DEFINITION TO yngve
go
SELECT sp.name
FROM sys.server_principals sp
WHERE sp.is_disabled = 0
AND EXISTS (SELECT *
FROM sys.server_role_members mb
JOIN sys.server_principals sp2 ON mb.role_principal_id = sp2.principal_id
WHERE mb.member_principal_id = sp.principal_id
AND sp2.name = 'sysadmin')
go
REVERT
go
DROP LOGIN yngve
Erland Sommarskog, SQL Server MVP, [email protected]