What is the criteria the Security Check-up report uses in determining the user profiles that have SA (NETIQKB31252)

goal
What is the criteria the Security Check-up report uses in determining the user profiles that have SAVSYS?

fact
VigilEnt Security Agent for iSeries 5.4/7.0

fact
VigilEnt Security Agent for AS/400 5.3/6.3

fact
VigilEnt Security Agent for AS/400 5.2/6.2

fact
VigilEnt Security Agent for iSeries PSAudit

fix
The criteria is as follows:

UPSPAU LIKE '%SAVSYS%'
AND UPUPRF NE 'QLPAUTO'
AND UPUPRF NE 'QLPINSTALL'
AND UPUPRF NE 'QSECOFR'
AND UPUPRF NE 'QSYS'
AND UPUPRF NE 'QSYSOPR'

Formerly known as NETIQKB31252