Audit Active Directory Changes

Good Day,

I have setup monitoring of my 3 Domain Controllers, but I cannot run any reports to view Access Changes, such as changes to user group access, etc.

Is this possible?

Thanks!