Is there a way to see transitive group memberships in the web interface?

[alexeyabel]

Assume user Alice is in group company and company is a child of software-users, thus Alice transitively is member of software-users. Is there a way to see in the web interface:

1. What are all users that are member of software-users including transitive relations?
2. What groups is Alice a member of including transitive relations? (In the example that would be company and software-users.

[gitsult4n]

No the web UI only shows direct edges
Group page lists its own users and its children and the user page lists the groups it is directly in

The inheritance itself is real in the model

class GroupQuerySet(QuerySet):
    def with_descendants(self): ...
    def with_ancestors(self): ...

def all_groups(self) -> QuerySet[Group]:
    """Recursively get all groups this user is a member of."""
    return self.groups.all().with_ancestors()

So policies and role checks already see software-users for Alice even though no screen shows it

What you can use today

Alice viewing herself
/api/v3/core/users/me/ builds its group list from all_groups() so that response is transitive

Anyone else
The admin API returns direct relations only so expand it yourself with the tree the group endpoint gives you

curl -s -H "Authorization: Bearer $TOKEN" \
  "https://authentik.company/api/v3/core/groups/?include_users=true" > groups.json

Each group carries children_obj and users_obj so walk down from software-users for question 1 and walk up through parents for question 2

A transitive toggle on those two pages would be a fair feature request since the queryset helpers are already there