curl --request GET \
  --url https://{tenantDomain}/api/v2/users/{id}/effective-permissions \
  --header 'Authorization: Bearer <token>'

{
  "permissions": [
    {
      "resource_server_identifier": "<string>",
      "permission_name": "<string>",
      "resource_server_name": "<string>",
      "description": "<string>",
      "sources": [
        "direct"
      ]
    }
  ],
  "next": "<string>"
}