User (who is not system manager) unable to change profile photo in user form

Hi all, my desk user are not able to change their user profile photo, they can somehow change their first name, lastname and username along with other details like phone, address etc.,
I would like it to be s.t., user can only change their password and profile photo

I have checked all the permission associated with the users role and they have no permission with user doctype, still they can see their name in the user list and change the things i mentioned.

how is that?