List users with system administrator roles

Hi all,

I need to generate a list of users with the Dynamics AX system administrator role for audit purposes, how can I do that?

Another audit requirement is to restrict developers from making changes to the production environment, they should only be able to make changes to the development and test environment. How can this be enforced and shown in Dynamics AX?

Thanks!