Reports the functional role assigned to a local admin account, not-assigned, crypto, security, or audit, describing what category of administrative duties that account is meant for. Admins use this to confirm role separation is being followed, for example verifying that audit-role accounts, which are read/logging focused, are not also holding crypto or security administrative capability. An account showing nsAdminUserLocalRole audit(4) is expected to be limited to log and audit functions rather than making security policy changes.