You may have noticed that after granting users read permissions to the attributes: Photo and/or thumbnailPhoto, prevents them from accessing the ‘User Profile Editor‘ in the ARWebSelfService site generating this error:
An error occurred during the last operation.
Error: The directory property cannot be found in the cache.
This is a product defect (TF00764362).
Please use the ‘Users - Read All Properties’ (AR MMC/ Configuration/Access Templates/Active Directory) instead of manually granting read permissions to the attributes: Photo and/or thumbnailPhoto.
This will be fixed on a future release of the product. If you require this immediately corrected, please contact support for a hotfix referencing the defect ID TF00764362.