Any member who has the DQS KB Operator (dqs_kb_operator) role or a higher privilege-level role can run codes on the computer that's hosting SQL Server as the account that's running the SQL Server service (default account is NT SERVICE\MSSQLSERVER).

Affected Versions Disclaimer

The included affected builds are considered potentially affected, based on their release chronology relative to the identified fix.