What's the maximum rights Devlopers have used.

Question

I my environment before me the DBA has given "SA" rights to the developers.
Now I want to check what's the maximum rights they have used.
So that I can show him this due to this reason I am removing your rights from sa. 
Thanks

Answer 1

There is an enormous difference between the rights granted to a developer in order to create/modify the objects in a database (and the roles/responsibilities of each developer with respect to the database and the system as a whole) versus the rights granted
to either the application or the user of such an application. You have a management issue that will not be solved by trying to retro-actively identify what "has been used".  Someone with the appropriate authority needs to first assign roles to the developers
(perhaps they all have the same roles, perhaps not) and then define the security needed to perform those roles.  Someone also needs to define the security needed by the application/users in order to accomplish the tasks that are implemented by the system
and to which they have been granted access. 
This is NOT something you do after the fact - doing so makes the job that much more difficult since developers generally take shortcuts (sometimes unintentionally), will use any feature to which they have access, and will assume that anything they can do
the user/application can (and should be able to) do.  And you need to test your application with users who have been granted the appropriate permissions (and not using an administrator account).