So I know I can use the Search Identity Provider option to assign someone access rights for the Policy Manager using an LDAP account. I can also search for a user or group and see which roles they have assigned directly or inherited from a group.
But is there a way to get a list of which users and/or groups have access? In an environment of 1000+ users and 100+ groups this would be impossible to do with just checking every user and group to see who has what type of access. So basically what I want is a report or at least user interface to see which roles are assigned to which LDAP entities. Is that available somewhere?