@ferozsyed Unfortunately real-time is not achievable, the best you can do is to create an alerts policy to notify but it will be a little later than when the change is made.
Alternatively you can look at deploying Privileged Identity Management to allow the CIO to approve admin access based on request for "just-in-time' access
