Enable Azure AD end-user self-service password reset

To enable users to be able to reset their passwords the capability must be enabled for the Azure AD instance. This can be done through the Configure tab of the Azure AD instance and setting the User Password Reset Policy to ‘Yes’. It is also possible to restrict who can reset passwords by turning on the Restrict Access to Password Reset option. Once the password reset option is enabled you select the methods that can be used for reset which at time of writing include:

– Office phone
– Mobile phone
– Alternate email address
– A list of security questions

Read more at – Enable Azure AD end-user self-service password reset