Access Control at the LDAP Resource

When the User Password On Change feature is disabled, Waveset performs password changes as the configured LDAP account administrator, which would have been given modification rights to the LDAP entry password attribute. When this feature is enabled, Waveset performs the resource password change as the user (that is, the authorization ID is the target entry DN), so the LDAP resource's access control configuration might need to be updated to allow password self-modification.