Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I have a proof of concept that programmatically updates SharePoint 2010 user profile custom properties. To get this working I had to impersonate a user with domain administration permissions which was fine for a PoC in dev however I am now working on a production version using an account with least privilage but I cannot work out how to determine what least privilage actually is.

The custom user profile property is set up as shown in the screen shot below and using my domain admin account I can successfully make and commit (save) updates to the property on the profile of any SharePoint user.

enter image description here

According the Edit User Profile Property screen in Central Admin any users with the "Manage Profile" permission can edit any property value for any user however this seems to be a throwback to SharePoint 2007 (MOSS) as I cannot see anywhere how this permission can be set (or even exists!) in SharePoint 2010.

Any help greatfully received.

share|improve this question
add comment

2 Answers

up vote 4 down vote accepted

To set the Manage Profiles permissions do as follows:

  1. Go to Central Admin
  2. Choose Application Management > Manage Service Applicatrions
  3. Select the User Profile Service Application (do not click the link)
  4. Click Administrators in the ribbon
  5. Add the user and set the Manage Profiles permission for it
  6. Click OK
  7. Your done!
share|improve this answer
    
You beat me to it! –  SPDoctor Apr 15 '11 at 12:55
    
Thanks Wictor (and SPDoctor), that has worked with one of the domain accounts I have set up however it is still not working with another that has less privilages. At least I can now work through the AD permissions on both accounts to determine precisely what permissions are required to update user profiles. –  Matt Taylor Apr 15 '11 at 15:01
    
depending on what parts of the object model you touch, you might need to set connection permissions as well (also under User Profile Service App, but instead of clicking Administrator, click Connection (dont have SP here so i think thats what it s called). This is needed if in code you can see your connection manager is null –  Anders Rask Apr 16 '11 at 10:46
add comment

If you go to the Service Applications management page in Central Administration, select the User Profile service application row (don't click on the text or you get the UPA management page) then click on Administrators in the ribbon, you can add a user and set the Manage Profile permission. I think this is what they are referring to in the message.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.