we use ARM to handle access permissions in Sharepoint. We mostly use groups and it is working fine.
Sometimes, we give a user explicit permission on a website. If this user e.g. leaves the company we usually search for the user and select "View Account-Details" and delete any permissions/group memberships.
This works fine when the user is a member of a sharepoint group as it shows these group memberships next to all the domain groups. But explicit permissions don't show up there and therefore the deactivated user account stays in the sharepoint and after a while we have 'dead' accounts in Sharepoint.
I know about other ways. Using Account details of a user is just the way we like it....
So, would it be possible to display also explicit sharepoint permissions?