Changes to admin role of a user for a particular product should cause a notification to a wider group of administrators.

This is because for product Adobe sign there are two admin roles - Admin and Privacy Admin.
Any admin can raise their permissions to privacy admin (which can read all docs in the account) and there is no wider notification.

This is also not logged in the audit log - so there is no way to track this at all.
Given that adobe sign contains sensitive information (HR is a big user) this is not good from any role tracking perspective.