I have been auditing our Atlassian site for months. I have found no great way to audit groups other than finding where they are embedded manually in each permission, notification, security, scheme's and project etc.
What are you using. API script, script runner, powerscripts, third party tool???
I have looked for add-ons with no real luck. Is there a Jira request to make this available addition to our internal admin tool set?