Group, user, access level reports for Compliance

In an effort to create a report using Analytics, I am able to pull groups and users associated to each group but cannot determine how to pull the access level for the user. I need to provide a listing for user access control reviewed bi-annually. In going through the documentation or your knowledgebase, it appears that I may be able to do this by pulling in the access level via API.  Is that the case?

Regards,

Rick.