The user may manage their own user details. This includes password setting (where integrated Windows authentication is not being used).