One can use the CAS action accessControl.isAuthorizedTables to show how the substitution parameter resolve.
proc cas;
action accessControl.isAuthorizedTables /
caslib="someLibrary"
permission="Select"
tables={"someTable.sashdat"}
;
run;
quit;
Of course it only shows the values of the user running this action