Deligate user to update their self information on AD such as phone number.
I'd like let user to update their particular self user account information such as Phone informaton or Department Information. It seems that it is not allowed by default in AD. I know deligation wizard might help but I'm not sure if it can restrict the access to "self". I don't want user to change another peoples information. Also want to be flexible to permit/restrict updateable field.