You can use Quest ARS to look up Active Directory group membership. https://manage.ad.cornell.edu/ADAdmin

 

See also

Quest ARS

"Permits" are just Active Directory groups.  You can use Quest ARS to look up group membership.

There's "how to" and FAQ information here:

For instance, to view a person's group membership in Quest ARS.