identity update - only kins with proper permissions