How to enable Auditing for User Account Changes

Hi,

We have a requirement to enable auditing for the user account changes like First Name, Last Name, Mail, Username, adding role or deleting a role, password reset.

And if enabled how to extract the data containing updated by whom and when and for which user along with the details changes old and new values.

Thank You,