A new read-only React sample is ready for the PnP SharePoint Framework webparts repository:

https://github.com/pnp/sp-dev-fx-webparts/pull/6479

The Effective Access Audit web part displays direct role assignments for the current SharePoint web and an optional list:

Principal title and type
Login name or email when returned
Role names
Web/list scope
Inherited or unique permission scope
Bounded results and safe site-relative path validation
Accessible loading, empty, error, and refresh states

The sample does not add, remove, break, or reset permissions. It also does not claim to expand nested groups, sharing links, item/folder permissions, or a user’s complete transitive effective access.

Local verification is complete: five Jest tests pass, TypeScript and ESLint pass, webpack builds, and the production .sppkg package validates.

Tenant validation requested

Could someone with SharePoint Online access please test this with a representative web and list and report:

Whether direct role assignments load as documented.
Whether inherited and unique scope labels are clear.
Whether list-level access behaves correctly.
How access-denied and empty states appear in a real tenant.
A real tenant screenshot for the PR gallery validator, if possible.

I do not have a suitable tenant for producing an authentic screenshot, so I am asking the community rather than fabricating one. Positive or negative feedback is welcome.