profile.permissions.yml

administer profile types:
  title: 'Administer profile types'
  restrict access: true
administer profiles:
  title: 'Administer profiles'
  restrict access: true
bypass profile access:
  title: 'Bypass profile access control'
  description: 'View, edit and delete all user profiles, including private field values, regardless of permission restrictions.'
  restrict access: true

permission_callbacks:
  - \Drupal\profile\ProfilePermissions::profileTypePermissions