I have now learnt that CUA configuration is not supported for Risk Terminator scenario.
When I chose to save user assignment directly from PFCG though, I found that RT would invoke the GRC FM GRAC_API_RISK_ANALYSIS right after the plug-in system call to /GRCPI/GRIA_EXIT_USERS_SAVE.