You can use Quest ARS to look up Active Directory group membership. https://manage.ad.cornell.edu/ADAdmin

See also

List of Primary Admins

Installing and Running the Quest ARS Console

Quest ARS

"Permits" are just Active Directory groups.  You can use Quest ARS to look up group membership.

There's "how to" and FAQ information here:

For instance, to view a person's group membership in Quest ARS.