Which FUSION tables OTHER than per_email_addresses per_ldap_users hz_parties store user email

Summary:

I need to find the table(s) where user email addresses exist in Fusion.

I've checked per_email_addresses,per_ldap_users and hz_parties tables but none of them contain the email address.

Content (please ensure you mask any confidential information):

When I do an email wildcard search (*@email.com) in Security Console, I see a number of users returned.

I have searched per_email_addresses,per_ldap_users and hz_parties tables but none of them contain the email address.

If I run the /hcmRestApi/scim/Users/ API with the user's GUID, the same email address is returned.