Hi, We have a default installation of FIM 2010. The user account have been sync'ed with the FIM Portal and the "User Management: user can read attributes of their own (action type: READ)" MPR is enabled. However, all users can MODIFY their attributes in the portal...even though the MPR clearly states READ permissions. Why is that? Thanks

The attribute update permission may be coming from another MPR and not the one you mentioned. Have any other MPR's been created that would have given this permission? Perhaps the users you have imported are members of a set that has additional rights, such as 'administrators' etc Those are the things that immediately come to mind...

Hi, No new MPRs. Only default ones. Users are all Domain Users; not admins. Also - some attributes that cannot be modified a user is still able to type new data in, but it is not commited - shouldn't this be greyed out? Thanks