if you reuse role bindings it's relatively easy because you can do a

LookupSubjects

for the user relation on a given role binding and get everything back