So, it's not that only some users can't customize their profile, it's that NO users can do so? Then check that it is turned on in AdminCP > Settings > Options > User Profile Settings > Enable User Profile Customization > Yes. And, then check their Usergroup Options. Then be sure to Clear System Cache after making the changes in the admincp.