showacl user

showacl user user-name [admin | all | admin-all]

Shows the user and the set of permissions granted to the user for destinations and principals.

showacl user username — displays permissions granted directly to the user. (An administrator can use this form of the command to view own permissions, even without permissions to view any other user permissions.)

showacl user username admin — displays administrative permissions granted directly to the user.

showacl user username all — displays direct and inherited (from groups to which the user belongs) permissions.

showacl user username admin-all — displays all administrative permissions for a given user (direct and inherited)

Note: The output from this command displays inherited permissions prefixed with a '*'. Inherited permissions cannot be changed. An attempt to revoke an inherited permission for the principal user will not change the permission.