Assigning a role to a user is a sensitive action, whether it is a change in role or the assignment of a role when the user is new.
Audit when a role is assigned and/or changed.