Hello Julien,
in IdM 7.2 we are using a different approach.
Every developer has his own "mxmc_admin"-user and we log the changes with database-traces on several tables which contain tasks/jobs.
This way you can fullfill your audit requirements, because logging is done on database-level and is fully isolated by the user doing changes in the system.
1. Step: Create a seperate mxmc_admin_<username> database-user for every developer with same permissions like the "original" mxmc_admin.
2. Step: Enable Database-Traces on Tables like mc_jobs or mc_tasks (hope i spelled them right).
3. Step: Most of the essential changes on the idm configuration is logged in the database-traces with timestamp, change and the user who did it. This way you a pretty reliable solution.
Greetings, Aydin