I have read about it only.

If I understand it:

1. I would start with a granting limited rights to a trusted group, enough to be able to run a stored procedure....