This report allows you to export the list of identities together with their assigned roles. You can filter out inactive identities and invalid roles:
The resulting report looks like this: