December 6, 2023 - User administrator can no longer set password for other users

Change Header


Change Type: Announcement
Product area: Platform services
Component: Administration

Technical details

Build artifact: cumulocity

Change Description


As announced earlier, see the release notes for release 10.17, to improve security, from a future version, user administrators will no longer be able to explicitly set passwords or email addresses for other users in the tenant. This change prevents that an attacker could have access to all users, in case the administrator account was compromised. Note that the administrator will still have the option to force the user to reset the password on the next login or disable the user.