User role for Password reset activity only

Hi,

We have the requirement to create a "User Role" in SAP FSM who will have access only to change the password of the other users.
We tried to create such a user role with Read and Update permission for User under User Roles, but this rule when assigned to a user, the user is also able to change the "User Group'' of others including his own as per his wish.

We have the requirement to create a "User Role" with access restricted to password change/reset only. Could you please help how to achieve this?

Thanks

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.