If I run, say, the Azure Resource Access Control with Membership report, I get ALL access for ALL resources, regardless of where in the hierarchy it is assigned. Is there a parameter setting I can use so that only permissions unique to any resource are reported? Alternately, has anyone found a clever way to deduplicate the Excel report? 150k lines is a bit unwieldy to manage, but downloading IAM/Assignments from Azure is also a nuisance.