How to
Allowing Users to Change their Password
You allow a group of users to change their password. The default setting is that all users can change their password.
Software permissions can be assigned to individual user accounts and to user account groups.
Path permissions can be assigned to both, individual user accounts and user account groups. Command permissions can be assigned to user account groups only and cannot be assigned to individual user accounts. If you want to assign command permissions to individual user account, you need to create a group with one individual. You assign command permissions to modify specific permissions that user account groups possess to specific objects on the given path.
Relative path permissions and type permissions can be assigned to both, individual user accounts and user account groups.
If no software permissions are configured for a user account or user account group, the user has no access to EcoStruxure Building Operation software. By default, new user accounts and new user account groups have no permissions to access EcoStruxure Building Operation software. Changes to the software permissions of a user account group or user account are applied the next time the user logs on.
You can also combine software permissions with other general policies for the user accounts that are members to the user account groups. For example, you can enable or disable the ability of the group members to change their passwords or to choose the workspace.
For optimal efficiency, assign software permissions to user account groups rather than individual user accounts, wherever possible. Using this approach, you can associate user accounts to at least one user account group for controlled permission to EcoStruxure Building Operation applications. A user account group can comprise both user accounts and other user account groups. You group user accounts and user account groups with similar interests. For instance, you can group software permissions with user accounts based on common tasks and responsibilities
You create a user account for Paul and associate him with the two user account groups: Administrators and Janitors. You associate Paul with those two user account groups. You grant Administrators and Janitors certain software permissions. Paul inherits software permissions of both user account groups.
In WorkStation, in the System Tree pane, select the EcoStruxure BMS server you want to configure.
Click the Control Panel tab.
Click Account management .
In the Domain Control Panel , in the Domain list, select the domain the user account group belongs to.
In the User Account Groups list, select a user account group.
Click Policies .
In the Policies tab, select the May change Password box.
Click the Save button
.action_zoom_plus_stroke 
Software Permissions, User Accounts, and User Account Groups
Control Panel Tab
Domain Control Panel
User Account Group – Policies Tab
Preventing Users from Changing Their Passwords
Changing Your Password