Are there any reports to show what changes are made in the user's security?

Summary:

Sometimes there are changes in security happening in lower environments that we would like to know when and who has changed the security. If there are changes in data security policies, we would like to know what was changed and who made the change. Are there any audit reports we can run or tables to show the changes that happened within a certain time frame?

Content (required):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):