---
title: Configure the user profile allowlist
description: The profile attribute allowlist controls the information returned to non-administrative users when they access json/user endpoints. For example, the allowlist controls the attributes shown in the user profile page.
component: pingam
version: 8.1
page_id: pingam:upgrade:upgrade-profile-whitelist
canonical_url: https://docs.pingidentity.com/pingam/8.1/upgrade/upgrade-profile-whitelist.html
keywords: ["Upgrade"]
page_aliases: ["upgrade-guide:upgrade-profile-whitelist.adoc"]
---

# Configure the user profile allowlist

The profile attribute allowlist controls the information returned to non-administrative users when they access `json/user` endpoints. For example, the allowlist controls the attributes shown in the user profile page.

Common profile attributes are allowlisted by default. You must add any custom attributes that you want non-administrative users to see.

The allowlist can be set globally, or per realm, in the user self-service service. To modify the list:

* **Globally**: Go to Configure > Global Services > User Self-Service > Profile Management, and edit the Self readable attributes field.

* **By realm**: Go to Realms > *realm name* > Services > User Self-Service > Profile Management, and edit the Self readable attributes field.

  You must add the user self-service service to the realm if you've not done so already but you don't need to configure anything other than the allowlist.

|   |                                                                                                                           |
| - | ------------------------------------------------------------------------------------------------------------------------- |
|   | You must allowlist the `kbainfo` attribute for users to manage their KB questions and answers in user self-service flows. |