Retrieving data from AD accounts

Hello,

Is it possible to get the permissions assigned to groups or users under the security tab. I'm specficy looking for the reset password allow. I need to find out how many accounts and the SamAccountName of the account that have this permission.

Can PowerShell retrieve this data?

I have tried using the below code but I cant seem to get the reset password allow. 

(Get-ACL "AD:$((Get-ADUser <SamAccountName>).distinguishedname)").access | ft identityreference, accesscontroltype -AutoSize