i took a different approach, instead leaving members the option to have their profiles visible to the unregistered (such as the superadmin account does).
in registration options i set 'can view my profile' to 'members only' as the default selection.
doing this rather than using usergroup perms allows members to opt-in to making their profiles readable.