Presently you cannot limit requester-type users from changing their own username. This can cause confusion and in the worse case be used maliciously to fake existing users. We brought this issue up with service desk support however there was no change that could be made to resolve this issue. They advised us to submit a feature request so here we are. Please add additional user privilege settings to prevent users from giving themselves titles and usernames.