user_audit

The User Audit module adds checks and a report to the Site Audit module. The report lists the user settings for failed login attempts, whether or not email verification is required for new users, and lists the roles that can administer users.

As well as providing the checks and report for Site Audit, this module also provides the same checks using Drush commands. drush ct:email-verification and drush ct:failed-logins list the same information as the Site Audit check. ct:privilege-users instead of listing the roles that can administer users, lists users with the permission to administer users, or, you can pass a role(s) or permission(s) to the command, for example, ct:privilege-users --roles=Administrator,Manager, to list all users with the given role(s) or permission(s).