Group Membership Protocol

Is there a log or protocol, that keeps track of group memberships.

We have multiple cloud admin accounts and certain groups that are private.
Generally it would be possible for an admin to acquire group membership to a private group, sync their shared files and leave the group again.

Is there a log in the database that keeps track of group memberships?