Does anyone know how to pull a report of user accounts on a managers , what access to domain they have and what rights?
From console there is no such facility, but from CLI you can get the required data by using show permission command.
show permission -u "USER_NAME"
Just check if this helps.
This command is available in ESM 9.0 (ZION). [Just FYI, Some more enhancements are done to this command in 9.0 SP1.]
If you are using older version of ESM (6.5 series), and this command is not present in CLI, contact Tech Support to check if you can get the patch of CLI having this command.