Restrict Access to the User Profile

Use the function current_user_can( $capability ). Where $capabilty applies.

For example:

If ( current_user_can( 'update_plugins' ){
//do some update plugin stuff
}