Profile update authorization