SQL to verify user privileges? (v9)

Discussion created by daryl.brown_ACI on Jul 26, 2016
Latest reply on Dec 20, 2016 by Christine_Chavez_6412
We're looking to start using the CallAPI in our production environment, and plan to create a dedicated user who will have the 'Logon via CallAPI' privilege.  Now I'd like to control all this via privileges defined via a UserGroup, but I want to make sure that none of our existing users have that privilege granted to them explicitly.  Since I'm lazy and don't feel like clicking through 40+ users, can anyone advise of a SQL query I can use to see which users have any privileges (or at least the 'Logon via CallAPI' one) associated directly with their user?  I'm having trouble pinpointing (or at least deciphering) which table has the user privilege info in it.

Thanks in advance!