This could enable unintended privilege escalation. The permissions of user-defined database roles can be customized by using the GRANT. GeoPITS brings you the comprehensive details of User-defined roles's support in different versions & editions of SQL Server.
| Version | Enterprise | Standard | Web | Express (Adv.) | Express |
|---|---|---|---|---|---|
| Version v2019 | Yes | Yes | Yes | Yes | Yes |
| Version v2017 | Yes | Yes | Yes | Yes | Yes |
| Version v2016 | Yes | Yes | Yes | Yes | Yes |
| Version v2014 | Yes | Yes | Yes | Yes | |
| Version v2012 |
This could enable unintended privilege escalation. The permissions of user-defined database roles can be customized by using the GRANT
You can find more details about this version here