What: Track changes made to permissions given to Roles
Why: Changes in the user/role permissions are typically requested by audit and therefore need to be traced. Possibility to change Roles’ permissions without any audit trail poses substantial risks, including fraud. For example, and Administrator could change some permissions for a given role, allow for fraud actions and then change the permissions it back as they were originally set. These changes are not traceable at the moment at any level (in Mambu UI or the database level) so there would be no possibility to investigate such situations.