Merge pull request #12889 from nextcloud/backport/12888/stable31

[stable31] chore: document profile visibility for users and administrator

Author: miaulalala

admin_manual/configuration_user/profile_configuration.rst

@@ -13,15 +13,20 @@ disable profile globally to remove all profile functionality.
 
 Profile properties are also written into the :ref:`system address book<system-address-book>`.
 
+.. note:: If not disabled, the profile is publicly visible.
+  The visibility of the individual profile attributes can be either controlled
+  by the assigned visibility scopes (e.g. "Private" will disable public access),
+  or by the user defined profile visibility.
+
+Configuration
+-------------
+
 To enable or disable profile by default for new users switch the toggle in
 Basic settings under the Administration settings section.
 
 .. figure:: ../images/profile_default_setting.png
 
-.. note:: If you are upgrading from Nextcloud 22 to 23 and want profile to
-  be disabled by default for all users, you may run the ``occ`` command below
-  before upgrading or upgrade first then switch the toggle in Basic settings
-  before letting any users log in.
+You may also run the ``occ`` command below instead to change the default to ``false``:
 
 ::
 

user_manual/images/userdata-visibility-toggle.png

@@ -69,3 +69,25 @@ If you set your data to **Federated**, the trusted server(s) which are added by
 If you set your data to **Global**, anyone can see your data. For some use cases this is wanted. 
 Someone with a public facing role such as marketing or sales might want to share their contact with a wide variety of connections which might not be using Nextcloud.
 
+
+Restrict who can see your profile data
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+If the profile is enabled by your administrator, then your profile data can be read by other users and guest.
+To control who can see which information you can adjust the scopes already mentioned:
+
+* **Private** will only allow you and users you have added to your phone book to see the data
+* **Local** and above will also allow guests to see your data
+
+To restrict the visibility even more you can disable guest from seeing your profile data by changing the profile visibility to logged-in users.
+On the personal settings you can find the button for profile visibility:
+
+   .. figure:: images/userdata-visibility-toggle.png
+      :figwidth: 50 %
+      :alt: screenshot of the profile visibility button in personal settings
+
+
+Which allows to configure the visibility for each profile attribute:
+
+   .. figure:: images/userdata-visibility.png
+      :alt: screenshot of scope dropdown on personal information form field