If you're checking for group membership directly, rather than checking for the permission, then this is going to fail for anyone not in the Operator group - e.g. the Support Staff update you did in 628-operator-group.sql and any other group that gets it.