List of users, groups and permissions

TO work with Users and Groups in AEM, you use com.day.cq.security.UserManager. This API provides access to AEM groups and users. To learn how to get a list of users using this API, see this article:

http://helpx.adobe.com/experience-manager/using/using-ajax-requests-display-cq.html

One you learn how to work with UserManager, you can perform other tasks supported by this API. 

Hope this helps. 

That is a good point -- the com.day.cq.security.UserManager works; however, better to use org.apache.jackrabbit.api.security.user.UserManager. I will ensure that the community article is updated to show use of org.apache.jackrabbit.api.security.user.UserManager.

Thanks all, so it means that I can't get that without developing a new app. That is disappointing, as I thought AEM is an auditable system - or at least we were told that by Adobe during presales.

Out of the box, CQ has the sample Geometrixx sample sites. 

However -- there is up front customization that is required to build the experience that you want (typically by a developer) -- including custom reports.

However - once done, an author can do things that a developer would typically have to do, like change content on a web page, add new pages, etc.

Hope this helps.