Roles are intentionally not included here. Role changes must go through
AdminClient.addRole / AdminClient.removeRole so that
callers cannot accidentally forward a request body (e.g. from a client)
that escalates privileges via the profile-update endpoint.
Fields that can be updated on a user profile via AdminClient.updateProfile.
Roles are intentionally not included here. Role changes must go through AdminClient.addRole / AdminClient.removeRole so that callers cannot accidentally forward a request body (e.g. from a client) that escalates privileges via the profile-update endpoint.