Role Holders
Which entities or principal groups receive a role.
Role holders asks:
Useful results should include:
- direct entity assignments;
- principal groups assigned to the role;
- members of those principal groups;
- tenant boundary;
- permission blocks attached to the role.
This helps operators understand the blast radius before changing a role.