For OD, there are 2 files ou-user.uid and od-admin.uid under /conf/roles that gets modified depending on the the role you are granting for a user.
We run TeamSite and OpenDeploy in a clustered environment - so - I have to manage generic and node specific files outside of the UI's. I am trying to find out what files actually are updated when I grant OD and workflow access rights so that I can control these through a workflow to my different nodes.Thanks.