A report that's purpose is to audit the roles and find out users that don't have roles assigned or incorrect roles via site. The following fields need to be added to report:

Active

Lookup Name

Role

Workgroup