Notification Server comes with the following built-in reports that provide you with certain security related information:
“Privileges granted to roles” tells you what privileges have been granted to a role. It doesn't tell you who are the members of those roles, and to do this yourself you would need to use a script that calls a Windows API, etc.
“User permission assignments on management items” and “User permission assignments on resources” provide information on the areas they look at, but they do not provide you with permission assignments of users. How can this be done?
Attached to this article is a report that displays the permissions that have been assigned to a User/Role. Note that this report does not include the console items that these permissions are assigned to for that user. This is possible to do, but may cause performance issue when run.
Note: If you do not click the Refresh button, the temp_trustee table will remain in the database and will prevent you from running either report again, until you manually run this statement:
DROP TABLE temp_trustee