When using Azure AD Security Groups to permissions SPO sites, there is a "Check Permissions" control (see below) in the Advanced Permissions page that is very handy for checking that users are properly inheriting the permissions of the group(s) they're in. Since it seems like AAD Security Groups are the (right? correct? best? only supported?) means of sharing Apps, it would be great to have a similar function when sharing a PowerApp.