Currently, we can fetch group information through the product APIs. However, at the moment, we do not have any API to find out which groups give access to which product roles.

Suggestion :

Introduce an API to find out more information about the product roles access given by groups. This will be helpful in troubleshooting if a user has more privileges than supposed to or if a group offers a broader set of permissions than needed.