Ideally, I need a list of active users that are assigned to a Profile in which the 'Modify All Data' system permission is checked.
But if I can even, quickly, get a list of just the Profiles with that permission, I can use reports and Excel to do the rest.
Has anyone done this before?
On the profile, there's actually a Permissions*PermissionName* field for each permission that you can query against. It's using the field's API name.
In this case, you're interested in Modify all Data so the following SOQL gives you that
SELECT ID,Name FROM Profile WHERE PermissionsModifyAllData = TRUE
In terms of permission names, you can refer to this question to make sure you're getting the right one based on what you see in the UI as some labels and names might not match.
