Endpoint Administration Guide for Windows › Scope of Administration Authority › Group Authorization › Group Authorization Attributes › GROUP-PWMANAGER Attribute
A user with the GROUP‑PWMANAGER attribute can change the password of any user whose record is within the group scope.
