Application role changes will be recorded in the audit log. Generalizes pre-existing listener that was in user for portfolio roles.
dandds