Can I query permission records?

Hello,

I'm trying to find a way to generate a report by tenant that will give me all Application and Object permissions for each User/Role. I've looked through the AJAX Metadata APIs and the SOAP/REST APIs. I could only find an original ID for the permissions object (if that's what it is), not an integration name, so I don't think a select query would work. In the master zone, under subscribers, there is an Applications tab which I thought may at least have what Apps each user has access to, but that wasn't the case.

Thanks,
Steve