[Freeipa-users] reduce "normal user" permission

[Scott Serr]

Two parts to this question:

Is there a way to disable a normal user's ability to modify their 
attributes like their name?

And along those lines, is there a convenient way to reduce what a normal 
user sees of other users (via web and cli)?

I'm using version 4.8.

Thank you!