The profile info is stored in the database, so it shouldn't be a folder permissions issue.

What are they trying to change? If it's the Display Name, the admin can toggle that in Feature Settings: General tab "Allow Display Name Changes."

Otherwise, what happens when trying to change the profile? Is there an error message?