And yes, it could be a stupid question about AD, or a question about
stupid AD.

Is there a way to see what rights a user or group has? Something
similar to the "Rights to other objects" and/or the "Rights to files &
folders" functions in Console One?