As an administrator I want to have a way to generate a report that will show
which users can execute which commands on which systems. It can be sliced in
couple different ways:
- Per user/group, i.e. user/group on this system or group of systems can run
these commands and on these systems those commands. In other words the break
down is: user/group; host/host/group; commands
- Per host/hast group i.e host/host/group; user/group; commands

Also it might make sense to do it by command but this should be a part of the
design and reviewed with administrators on the freeipa-users list. They should
provide more feedback which might change initial assumptions spelled out in
this ticket.