Set user password

Set or change a user's password. The operation is treated as a self-change when the target user-id is the currently authenticated user, and as an administrative reset otherwise. When self-changing, oldPassword is required so the current password can be verified; for an administrative reset oldPassword is not required.

Users can change their own password without MANAGE_USERS access right. Administrative password reset requires MANAGE_USERS access right.