Yes, and make absolutely sure, you contacted your Basis-guys beforehand. Not out of politeness, but just to avoid being decapitated the next time you show up on their territory.
SM19 and SM20 for a single user, over a week, for every transaction is not (!!) a performant way to find out what a single person is doing in the system. Especially not in productive landscapes with multiple application servers, where you would have to run the log on every instance because load balancing. Bleh!
ST03N will give you some data - the beauty of which is: they are strictly performance-orientated and a Basis tool and hence respect such things as protection of data privacy of which some countries, in fact, have laws about. You don't get all the data sorted by userID out of ST03N.
So, the first question we ask here, before we throw around technical advice is:
- Why would you need such data?
- Has HR explicitely authorized you to extract such data from the system?