1) Provide a role or permissions that can restrict the profile information that can be modified by the user. In a closed/secure mail system, the ability to restrict the user from changing key information (display name, etc) improves security and anti-phishing support.

2) Provide an event that triggers when user profile information has been modified. This will improves security and anti-phishing support.