As T_Kress says there is no report in OneStream that shows a complete picture of where security is applied and what security groups are being used. You will notice that the descriptions on the two partner solutions do not say they cover all areas where security is used ('key security', 'virtually all'). We have written a report that lists everything: Application, System, Users, Data Access and Environment. It was not easy as it is not just that the security group information is in the Framework database - the information on the Application and System security role assignments is only available through a Business Rule is one of the challenges.
There are a number of ways of getting around the problem of the security group information being in another database. You can create an in-memory data table (i.e. save it to a variable) or use a T-SQL statement that creates SQL variables to hold the security group info or read the info into a dictionary and look it up.