Users can edit their profile photos by default. However, you can prevent them from doing so if you manage your users' photos in another system, which you import them from, and don't want them to change their profile photo. You can configure a model's workflow to update your users' profile photo. See our knowledge base article, Create a workflow.