---
title: Configure the user profile allowlist
description: "Configure PingAM's profile attribute allow list to control which user attributes are accessible in identity exchanges"
component: pingam
version: 7.5
page_id: pingam:upgrade:upgrade-profile-whitelist
canonical_url: https://docs.pingidentity.com/pingam/8.1/upgrade/upgrade-profile-whitelist.html
llms_txt: https://docs.pingidentity.com/pingam/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
keywords: ["Upgrade"]
page_aliases: ["upgrade-guide:upgrade-profile-whitelist.adoc"]
superseded_by: https://docs.pingidentity.com/pingam/8.1/upgrade/upgrade-profile-whitelist.html
---

# Configure the user profile allowlist

AM 7 introduced a profile attribute allowlist.

The profile attribute allowlist controls the information returned to non-administrative users when they access `json/user` endpoints. For example, the allowlist controls the attributes shown in the user profile page.

Common profile attributes are allowlisted by default. You must add any custom attributes that you want non-administrative users to see.

The allowlist can be set globally, or per realm, in the user self-service service. To modify the list:

* **Globally**: Go to Configure > Global Services > User Self-Service > Profile Management, and edit the Self readable attributes field.

* **By realm**: Go to Realms > *realm name* > Services > User Self-Service > Profile Management, and edit the Self readable attributes field.

  Note that you need to add the user self-service service to the realm if you have not done so already, but you do not need to configure anything other than the allowlist.

Note that the `kbainfo` attribute is required to be allow-listed for users to manage their KB questions and answers on user self-service flows.