core_user_get_users appears to access all (or at least most - I haven't checked exhaustively) user profile fields. However, core_user_update_users appears to miss out several fields effectively preventing them being updated via the web service.

Example... the field 'Institution' can be read but not written.

Surely, these functions should have balanced functionality?