We would like to have audit logging on the user and group membership changes. This way we can determine what happened when and what was the situation in the past.