Custom Roles and Privileges report?

Summary

We have quite a lot of custom roles, containing combinations of privileges that are either subsets or supersets of delivered roles. We need to report on them.

Content

Due to our roles and responsibilities not aligning well with the delivered roles and responsibilities and also not wanting to have users accessing certain areas that the delivered roles grant them access to, we cloned and created our own, a few years ago and a few versions ago now. 

We are finding that after all the upgrades and patchings we have some users that seem to have more access than we recall allowing them to have, so we want to do an audit.