Hello Peter
I did set a trace on RSUSR100N when searching profile changes for a user... and in fact it is mainly reading table USH04 (Change history for authorizations) & USR11 (profiles names).
I crossed check and the profiles change history from USH04 & RSUSR100N does match.
Sometimes tables names are misleading !
Regards