Folks - what is the recommended approach for controlling and recording small but vital changes on the Linux servers - creation of the group, adding users to a sudo, etc.?
We use Salt for the major deployments, but I also want to influence owners of the smaller deployments to enforce a complete discipline and configuration management of the smaller scale things such as user creation and adding him/her to a sudo.