A log is available in the domain that allows you to see which user at what time created a new user with one or more roles, deleted an existing user or assigned a role to or deleted a role of an existing user.

Only a user with the 'Management' role can view the data in the log.

Click the Home icon on the navgation bar and then click the My domain tile. Click the User roles log button in the screen now opened.

The following screen is opened:

The data in this log can be filtered by user role.