List of Roles/Group Memberships removed and List of Roles/Group Memberships added for a single person.

Hello All,

Used Case scenario is like the following:

Departments are having ADgroups, SAPRoles etc. assigned as birthrights. Now as part of Department move Employee moves from One department to another. As a result of the move some new groups/roles will be added, and old ones will be removed.

My question is - is there an way we could generate a report of all the assignments getting added/removed as part of the department move for a single employee - the moment it happens and sent to a person as mail?

Any guidance, implementation examples will be welcome. :)

Thanks in Advance for your help!