Is there any way to use the LookupResources API to find which resources a Subject does not have access to?