What is the best way to create an audit report on employee salary and direct deposit changes

Summary

This audit report includes employee salary changes, direct deposit distribution changes, and security role changes made by users in two specific roles.

Content

We don't have the Audit turned on in the system.

We want to capture the following changes made by users who has two specific roles (not from everyone):

   1.  Update, correction, and deletion to Employees salary and direct deposit

    2. Create a new user or remove or add a role to an existing user

    3. Create a new role or remove or add a privilege to an existing role

I am thinking about using HCM Extracts for this report. However, I am not able to find fields for user roles and privileges in any HCM Extract UEs. Does anyone have a better solution?