LookupSubjects is correct for going from a permission to a find all users