This Perl script parses the content of the /usr/lib/rsc/users file on all agent-enabled servers on the network. It produces a report (html, ascii, Perl Data::Dumper, or csv) displaying each users ACLs on each host from which a users file was retrieved. It parses both role-granted access and nsh-granted access (if I understand the users file correctly, anyway).
It has only been tested on BL 6.2.
Compliments of Andy Mitchell, Checkfree Corporation.