There should be a report in MyCSF to print the internal and external users (Name & Security information) with access to the assessment object.