Security role audit

Summary

audit addition and removal of roles from users

Content

I was asked for a report to audit when users are first assigned to a role (even if they no longer have it) and when a role is removed from a user. I did not find attribute level auditing with Manage Audit Policies. There also doesn't seem to be a shadow table for PER_USER_ROLES.

I investigated the canned 'User and Role Access Audit Report' process, but it does not contain the necessary history.

Do you have any ideas, or am I missing something?

Thanks!