Paul Ryan

Limit Revision Publishing restricts edits made by users without the publish_posts capability. Their edits will be saved as an unpublished revision, and the original post will remain published. The All Posts view in the WordPress Dashboard will contain a column indicating posts with unpublished revisions. Notification emails can be sent to a subset of users whenever a new revision has been submitted so users with elevated privileges can publish them. Finally, specific roles can be marked as limited, so any users with that role will be restricted from publishing revisions on all post types. 
Note: this plugin only works with the Classic Editor (TinyMCE). Users of the Block Editor (Gutenberg) will be able to publish any post types granted by the capabilities in their assigned role.

Limit Revision Publishing

Limit Revision Publishing restricts edits made by users without the publish_{post_type} capability.

Slava Abakumov

Plugin will record all changes in user blog roles (wp_x_capabalities usermeta) across an entire WordPress installation.
Visit <a href="http://teleogistic.net/2012/03/record-user-role-changes-across-a-wordpress-network-for-troubleshooting/" rel="nofollow ugc">Boone’s page</a> for more information about this plugin.

BBG Record Blog Roles Changes

Plugin will record all changes in user blog roles (wp_x_capabalities usermeta) across an entire WordPress installation.

Limit Revision Publishing vs BBG Record Blog Roles Changes