Need to create a configuration control to monitor changes to Manage Supplier User Roles setup

Summary:

Seeking guidance on what audit objects would allow us to create an RMC advanced control to monitor updates in the Manage Supplier User Roles setup task

Content (please ensure you mask any confidential information):

It is possible to add an inappropriate / high-powered role to the list of roles allowed for Supplier Users by way of the Manage Supplier User Roles setup task, and then provision that role to a Supplier User. That Supplier User can then get into the system and find a way into Setup and Maintenance (this is confirmed, not speculative). Because of zero trust audit requirements, this represents a security gap. We would like to mitigate the risk by creating a configuration control in Risk Management Advanced Controls module to report on any changes made in the Manage Supplier User