We have Jira running with Crowd. The External user management is ON, but users are still able to edit their profiles/passwords through Jira. The only way disable those edit links is to make the Crowd directory to be 'Read Only' through Jira's User Directory admin interface. However this will not work for us since we need Jira to be still able to update user's groups. We don't want users to be able to update their profiles/passwords since those are managed by Crowd.