<p>Currently there isn't a way to do what you're looking for from the control panel, even if a user has "Administrate Users" permissions.</p>

<p>In the control panel, only current administrators can change an existing user's email or password and they must supply their existing administrator password to do so.  And even administrators can't set an initial password for a user from the control panel.</p>

<p>On the front-end, if you're running Craft Pro and you've enabled public registration, a user <em>can</em> set an initial password from the public registration form.</p>

CC BY-SA 3.0
2015-07-23T17:27:27.523Z
Dealing with this issue right now. Sendmail and PHP Mail will send the test email. Public registration is enabled. On the admin login form, there is no option for setting a password, and the password reset email does not send. Ideas? Really seems like an admin should be able to set a default password for non-admin users.
idahotallpaul
CC BY-SA 3.0
2014-08-18T18:34:37.773Z
2014-08-18T18:34:37.773Z
Brad Bell
<p>I'm trying to set a password for a user account while logged in without Site Admin permissions (the user does however have 'Edit Users+Administrate users+Assign Groups and Permissions + Remove User permissions all enabled). - Despite this they still can't change a password for a current user or even create a new user with a set password that can login to the system.</p>

<p>This is partially problematic as 'Verify email address' is not something the company is interested in so I'm looking for a solution to create a user on the backend that can login once their account is created without verifying or really receiving any email and without having to give full administrative access to my client just to set passwords? Seems like something that should be achievable especially with the permission 'Administrate Users' enabled.</p>

<p>Cheers.</p>

CC BY-SA 3.0
2014-08-15T16:59:54.340Z
Can you share the template code you're using to create the user?
Brad Bell
CC BY-SA 3.0
2014-08-18T13:03:30.193Z
Hi Brad, my users are just using the control panel page... They can create a new user but have no way to set a password or reset a password for user already in the system.
Darren
CC BY-SA 3.0
2014-08-18T18:15:25.900Z
Ahh, thought it was from the front-end of the site.  Will add an answer.
Brad Bell
CC BY-SA 3.0
2014-08-19T21:59:02.947Z
Are there any plans to change this do we know? It basically makes it impossible to give my client the ability to create users in the CMS without giving them full access to my sections and schemas as well (they could do anything!). Surely it's not any more dangerous from a security pov than giving them the ability to set access permissions / the ability to delete users?
Darren
CC BY-SA 3.0
2014-08-19T23:28:01.397Z
Entirely possible... we've had a handful of people run into what you're seeing.
Brad Bell
<users><admin>
Setting user password on creation / without full admin rights
# Setting user password on creation / without full admin rights

(Asked by: username_0 on 2014-08-15)

I'm trying to set a password for a user account while logged in without Site Admin permissions (the user does however have 'Edit Users+Administrate users+Assign Groups and Permissions + Remove User permissions all enabled). - Despite this they still can't change a password for a current user or even create a new user with a set password that can login to the system.

This is partially problematic as 'Verify email address' is not something the company is interested in so I'm looking for a solution to create a user on the backend that can login once their account is created without verifying or really receiving any email and without having to give full administrative access to my client just to set passwords? Seems like something that should be achievable especially with the permission 'Administrate Users' enabled.

Cheers.

**Tags:** users, admin
> **Comments:**
> **username_1**: Can you share the template code you're using to create the user?  
> **username_0**: Hi Brad, my users are just using the control panel page... They can create a new user but have no way to set a password or reset a password for user already in the system.  
> **username_1**: Ahh, thought it was from the front-end of the site.  Will add an answer.  
> **username_0**: Are there any plans to change this do we know? It basically makes it impossible to give my client the ability to create users in the CMS without giving them full access to my sections and schemas as well (they could do anything!). Surely it's not any more dangerous from a security pov than giving them the ability to set access permissions / the ability to delete users?  
> **username_1**: Entirely possible... we've had a handful of people run into what you're seeing.  

---

## 1 answers

### Answer by username_1 on 2014-08-18. Score: 1 | Accepted answer

Currently there isn't a way to do what you're looking for from the control panel, even if a user has "Administrate Users" permissions.

In the control panel, only current administrators can change an existing user's email or password and they must supply their existing administrator password to do so. And even administrators can't set an initial password for a user from the control panel.

On the front-end, if you're running Craft Pro and you've enabled public registration, a user *can* set an initial password from the public registration form.

> **Comments:**
> **username_2**: Dealing with this issue right now. Sendmail and PHP Mail will send the test email. Public registration is enabled. On the admin login form, there is no option for setting a password, and the password reset email does not send. Ideas? Really seems like an admin should be able to set a default password for non-admin users.  

---

