I guess they are not trying to access their own records, don't they?
The error message in SU53 indicates that this is a structural auth. issue. Nevertheless ALL should contain the required objects. Did you check the listed objects of SU53 in the output of RHAUTH00? (leave the field profile empty!)
A next step for me would be to recap and double check T77UU / INDX. Did you run RHBAUS01?