Logging permission changes on samba shares

I want to be able to read a log file where I see which user changed which permissions on a share living on a separate univention fileserver (member-role).

how can I do that?
I tried a bit by editing smb files but reverted as nothing worked so I reverted again. what’s the closest to an official way to do so?