Thanks for the replies. I will check the DDL Triggers for auditing this and simular grants.

Unfortunately we serve a lot of third party applications on our sql server farm...

Unfortunately the stored procedure does not fail (if executed under SQL Agent Job). If tested the scenario with following simplified stored procedure

-- Create "bad" procedure

create procedure [dbo].[spadmintest] as

begin

CREATE LOGIN [admintest]...