how do I configure automatic deactivation of user password on GRC 10.1

We have users that utilise the portal only and would like the system to have an option to deactivate password rather than generating a default password but also have an option for the system to generate a default password once we add transacting roles for those users in future. Hope I really get help on this