Is it possible to get all users who have assigned a permission e.g. like Directory.ReadWrite.All

Hello

I like to know if it would be possible, as global admin, to search for a permission assigned to a user and search for all user having that same permission?

I read an article about: "Microsoft Breach by Midnight Blizzard (APT29): What Happened?"

The interesting part was that somebody could gain access to the "Directory.ReadWrite.All" permission and could create his own user.

I thought it would be good to get a report where I can search for a specific permission like graph API write permissions und gain information who has that permission assigned to.

I hope that is possible, otherwise we would lose security by no reporting.

Thanks in advance.

Kind regards

Michael