If you use Active Directory you could give fnInGroupAD() a go.