User detail

Profile, role assignments, direct permission grants, and effective permissions in one place. Direct grants can be scoped to a production or group and given an expiry date.