Change Auditor : Group Membership Changes

Hi,

How to configure a protection policy on deny group membership changes.

I need to protect group membership on removal only, but additions should occur.

How can this be configured within Change Auditor?

Should be similar to protecting disablement of account but can enable accounts

Regards

Jannie