---
title: Configure the user profile allowlist
description: Configure PingIDM to allowlist user profile attributes in self-service flows
component: pingam
version: 8.1
page_id: pingam:upgrade:upgrade-profile-whitelist
canonical_url: https://docs.pingidentity.com/pingam/8.1/upgrade/upgrade-profile-whitelist.html
llms_txt: https://docs.pingidentity.com/pingam/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-06-01T14:11:17Z
keywords: ["Upgrade"]
page_aliases: ["upgrade-guide:upgrade-profile-whitelist.adoc"]
---

# Configure the user profile allowlist

The profile attribute allowlist controls the information returned to non-administrative users when they access `json/user` endpoints. For example, the allowlist controls the attributes shown in the user profile page.

Common profile attributes are allowlisted by default. You must add any custom attributes that you want non-administrative users to see.

The allowlist can be set globally, or per realm, in the user self-service service. To modify the list:

* **Globally**: Go to Configure > Global Services > User Self-Service > Profile Management, and edit the Self readable attributes field.

* **By realm**: Go to Realms > *realm name* > Services > User Self-Service > Profile Management, and edit the Self readable attributes field.

  You must add the user self-service service to the realm if you've not done so already but you don't need to configure anything other than the allowlist.

|   |                                                                                                                           |
| - | ------------------------------------------------------------------------------------------------------------------------- |
|   | You must allowlist the `kbainfo` attribute for users to manage their KB questions and answers in user self-service flows. |