At the DB level you can use sp_helprotect. Therefore, if you automate the tying of login to user, you should be able to script something to go through each database and report back.