SharePoint 2010 user profile updates permissions

Question

I have a proof of concept that programmatically updates SharePoint 2010 user profile custom properties. To get this working I had to impersonate a user with domain administration permissions which was fine for a PoC in dev however I am now working on a production version using an account with least privilage but I cannot work out how to determine what least privilage actually is.

The custom user profile property is set up as shown in the screen shot below and using my domain admin account I can successfully make and commit (save) updates to the property on the profile of any SharePoint user.

According the Edit User Profile Property screen in Central Admin any users with the "Manage Profile" permission can edit any property value for any user however this seems to be a throwback to SharePoint 2007 (MOSS) as I cannot see anywhere how this permission can be set (or even exists!) in SharePoint 2010.

Any help greatfully received.

Answer 1

To set the Manage Profiles permissions do as follows:

1. Go to Central Admin
2. Choose Application Management > Manage Service Applicatrions
3. Select the User Profile Service Application (do not click the link)
4. Click Administrators in the ribbon
5. Add the user and set the Manage Profiles permission for it
6. Click OK
7. Your done!

Answer 2

If you go to the Service Applications management page in Central Administration, select the User Profile service application row (don't click on the text or you get the UPA management page) then click on Administrators in the ribbon, you can add a user and set the Manage Profile permission. I think this is what they are referring to in the message.