1. Listing a user's permissions
To list all permission that $USER has, run:
domtool-admin perms $USER
2. Finding out who has a permission
To list all the users that have permission $CLASS/$VALUE, run:
domtool-admin whohas $CLASS $VALUE
For instance, to see which users are allowed to configure hcoop.net, run:
domtool-admin whohas domain hcoop.net