This is controlled through Profile Publish Access.

As a Platform Manager, navigate to
  1. Core > Security > Profile Access > Profile Publish Access
  2. Select Candidate in the role dropdown list
  3. Click on Edit in the upper right-hand corner
  4. Mark Parent of Candidate
  5. Click Save