I would like to create a group authorization where users in the group have the abiltiy to unlock and change passwords. I do not want them to have the abiltiy to change anything else. IE Move people into admin group, Change other privileges etc...
Is this possible?