Hi Brian. thank you for your reply.

We have done that you suggest. The active directory groups are members of the database roles, but we only have the user credentials. How can we query the roles if we have not the name of the active directory group?