In EE2, you have to be a Super Admin to change a user's password without knowing their old password in the CP. This is very annoying when you setup up 'Client Admin' member groups as they expect to be able to do such a task for unlocked member groups.

In EE1, there was an add-on called NSM Member Password Security that allowed you to specify member groups that could reset the password without knowing the old one (something that should be part of the standard member permissions in EE, IMO).

But I can't see any such add-ons for EE2. Does anyone have a workaround for this (without giving them Super Admin access)? Or how do you deal with 'Client Admin' member groups that have permission to add/delete member accounts, but can't reset someone's password for them without knowing the old one? Use the forgot password form instead?

1 Answer 1


Use the forgot password form instead?

Exactly. Without building custom code to do this (which is quite doable), this is the way to go - and I suggest using FreeMember and its Forgot Password form on the front-end, so users can use it directly. That way your Client Admins don't have to be bothered.

  • I get the client admins to use the Forgot password form too. Much easier.
    – foamcow
    Jan 18, 2013 at 18:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.