Change user password in Admin Console

Idea created by fabfa01 Employee on Apr 9, 2018
    Wish-Listed
    Score18

    -> to give a follow to a support case as requested by the customer 

     

    Analysis
    ========

    To perform actions like change password or edit details for a user the respective user needs "User Administration" permission.
    And "User Administration" permission does not come with "operator" ACL by default.
    If a user wants to perform actions like change password or edit user details it can be done by giving him "User Administration" permission.
    But this permission is a global permission, with this permission he will get access to the "Manage Users" action in admin console and then he could be able to change/edit details for other users too.

    This functionality is as per design.

    Discussion:
    ===========

    if a user in admin console is unable to change their own password, and needs to have some other administrator change their password for them, this is a security risk as now the administrator knows the user password.

    If you grant permission for the user to change their own password, and also be a user admin, this represents a security risk as now the single user has access to all user accounts.


    Feature Request:
    ================

    to have the option for a single user to be able to change their own password, currently available in UMP and IM, so it should be available in Admin Console also.