Allow user autocomplete without granting access to user profiles

#3209

See QA steps in issue description.