I honestly didn't know this was a thing until someone asked me to do it, and it turns out Patch Manager can help with this!
Import this under Configuration Management Reports → Local Users, Groups, and Logon Information.
I filtered out some (but probably not all) of the other groups that include the word "Administrators" and double-checked my data sources so I don't cross the streams.
