APM Assigned Resources reporting

To clarify, are you trying to get a list of the resources each individual user is consuming? Such as bytes in, bytes out, CCUs, etc., or do you want a list of the network/portal resources each different AD group has assigned to a user within that group?

For the first, I do think session reporting is the way to go. For the second, I can't think of anything beyond just looking at the VPE and seeing which resources are assigned to which AD query ending.