Expected Behavior

Anyone with an "Admin" role can create new users (without enabling open registration in the settings) and reset user passwords.

Current Behavior

Only the user can reset their password, & if they forgot it then they have to create a new account. The only way to create a new user is to enable open registration in the settings panel. This can pose an issue if multiple people can access Ganymede because anyone can create an account any time.