This is exactly how we do it with most of our Auto Actions.
However, in this case, neither the frontend user nor backend admin initiates the update but an application.
The app simply switches a flag in comprofiler from 1 to 0 because a subscription has expired.
This hides a CB Tab from being display and it executes properly.
But consequently an Auto Action is required to do some housekeeping:
1) unpublish a CB Content Module
2) delete some content from user's profile
For this transaction we're looking for correct type of trigger listening to DB updates.
onAfterUpdateUser seems not to work here.
Thank you.