MS tool to capture AD account domain privs?

Does MS make a utility/tool that can capture a domain account's access? In other words we have a programmer that is creating a PS script that will go out and capture information on user accounts and ...