User's Profile picture access

I am using cohort environment for schools.

In that to get profile picture of users I am using users by id(https://api.sky.blackbaud.com/school/v1/users/{user_id}) endpoint.

In response I am getting a link to the users profile picture.

So My doubt is that whether users profile picture link is publicly accessible or only by authorized users in school environment?