How can I list the permissions a user gets only from ARS?

We have some help desk users that, despite being in the same groups, have different access levels in ARS. 7.4. How can I list the permissions and their sources a user has so I can compare them?