I have a proof of concept that programmatically updates SharePoint 2010 user profile custom properties. To get this working I had to impersonate a user with domain administration permissions which was fine for a PoC in dev however I am now working on a production version using an account with least privilage but I cannot work out how to determine what least privilage actually is.
The custom user profile property is set up as shown in the screen shot below and using my domain admin account I can successfully make and commit (save) updates to the property on the profile of any SharePoint user.
According the Edit User Profile Property screen in Central Admin any users with the "Manage Profile" permission can edit any property value for any user however this seems to be a throwback to SharePoint 2007 (MOSS) as I cannot see anywhere how this permission can be set (or even exists!) in SharePoint 2010.
Any help greatfully received.