This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 22%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
I need to reset the password to a non privileged user and I am not able to do it. I have helpdesk administrator role and user administrator role. I am getting this error The password can not be reset. This may be due to an incorrect level of administrative privilege or if trying to reset your own password.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 13%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBB%3C/text%3E%3C/svg%3E)
Hello @Schifter, Gabriela
Thank you for reaching out.
To be able to assist you, I need to get more information about the user.
Is this user a synced user from On-premises through Entra ID connect with password writeback configured or a guest user invited into your tenant?
Hi, Babafemi Bulugbe the user is a member of the tenant.
Hello,
Thanks for the information, is this a cloud-only user or synced from on-premises?
cloud-only user
Just for clarification, you currently have a User access administrator in the tenant and the user doesn't have a privileged role assigned. Also, you are the one trying to complete this operation and not the user trying to reset his or her password.
Just for clarification, you currently have a User access administrator in the tenant and the user doesn't have a privileged role assigned. Also, you are the one trying to complete this operation and not the user trying to reset his or her password.
yes, I have a user with non privileged role assigned and I want to reset their password and I am not able to do it. I have the helpdesk administrator and user administrator roles.
Thanks for the information.
I would like to know what roles the user account you are trying to change has. The "User Administrator" role cannot change the password for accounts with certain roles, such as "Global Admin" and "Privileged Role Admin". It also cannot change the password for normal user accounts if they are a member/owner of a role-assignable group.
Also, does this user belong to any administrative unit within the tenant? Another thing to check is if the user has an eligible role.
NB: A Helpdesk Administrator cannot rest the password of a user https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords
the user doesn't have global admin or privileged role admin, it doesn't have any role assigned and doesn't belong to any administrative unit. Just have reader roles
As a user administrator, you should be able to reset the password of a user assigned a directory reader role. The only thing to check here is if the user belongs to a group with role-assignable group.
For instance, in your tenant, check the groups where the user belongs to and check if there is any group with Microsoft Entra roles can be assigned to the group set to yes
Check this link for more information.
Confirmed that the group that applies the User Administrator role has the "Yes" flag as needed
I believe the user belongs to this group. Hence, the reason why you are not able to reset the user account.
thanks, I will review it.