One of the largest SP headaches I have is when designing 'secure' sites for very large clients, the Site Owner is also the administrator (not Site Admin) in the sense that they need to manage and report on the site. Sites are set -up correctly; no individual members, all members are assigned to groups however, outside of PowerShell there is no easy way to report on the membership of the groups - which is usually a DISO/CISO requirement BUT only SharePoint Site Admin have the authority to run PowerShell and they are effectively 'air gapped' from Site Owners. I have, kind of, worked round this using very complex Power Automate scripts but these are way beyond the capabilities of most of the teams (usually PMOs) that are left in charge. Surely, there must be a simple means to report across and co-ordinate members of the Groups within a site?