You could do all of this in WebFOCUS.
First: talk to your IBI rep to see if he/she could allow you to use the LDAP adapter and the WebFOCUS Web service WSDL creation process. Or at least rent them for a week or two.
Second: Use the LDAP adapter to gen a list of users, emails, etc, and any role (memberOf) info that will allow you to determine the users MRE Role and Group privileges, and hold the results in a flat file.
Third: Map the WSDLs back to WebFOCUS as tables. You will need 4 of them: MRECreateUser, MREAddGrouptoUser, MRESetUserRole, MRESetUserFlags.
Forth: Build a fex that will iterate through the flat file and run a Table request for each of the above web services using the row values as where statements.
A buddy of mine just did the same thing (minus the LDAP extract). It took less then a day to build and run to completion.
"There is no limit to what you can achieve ... if you don’t care who gets the credit." Roger Abbott