Note:

The ds-pwp-modifiable-state-json delegated admin attribute is not visible on the View/Edit and Reporting pages. It's for internal use only, similar to the ds-pwp-account-disabled attribute.

To enable initiate password reset functionality for a specified REST resource type:

  • Run dsconfig with the create-delegated-admin-attribute option.

    The following example grants "Tenant Users" the initiate password reset functionality through the ds-pwp-modifiable-state-json delegated admin attribute:

    dsconfig create-delegated-admin-attribute \
    --type-name "Tenant Users"  \
    --attribute-type ds-pwp-modifiable-state-json  \
    --set "display-name:Modifiable Password Policy State"