When debugging provisioner errors, for some reason the group or member provisioner details don't always show the error messages. There may be an error time but no error message. The provisioning errors screen generally has more information. However, it truncates the results to the top 1000, so you can't always see a specific object you are looking for. Another reason to have a filter would be to focus user errors for a specific group, ignoring others that might show up in the list.

There could be a filter for group name/uuid or subject id/identifier. It may also be useful to have it look at cache buckets too, so it can find based on calculated values that are cached. Maybe there should be two filters, one for group, and one for subject. Either or both could be filled in.