Getting User Application Roles as webhook?

Is there any way to fetch real time updates for Atlassian users when their application roles are updated?
Let say on the cloud site, we have Jira and Confluence.
Some user groups are restricted to use only Confluence and some are restricted to use only Jira.
Now when I add a new user or update application role of an existing user is there a webhook that I can use to identify these changes at app level.
user_created webhook is their and but what about the changes done to application roles later on?

Do I need to call Get User API on every request that we get on the call or is there a better way where I can sync user application roles through a webhook ?