I want to give selected users permission to unlock accounts and reset passwords on behalf of other users.

In Admin Console, you can create or modify a policy to assign these permissions to the selected users. Perform the following steps:

1. In Admin Console, go to “Configuration” and select “Policy Configuration” in “Self Service Configuration.”
2. Click pencil icon in “Action” column to edit a policy.
3. Check “Unlock Account on behalf of user” to provide this permission for all users in the selected OU.
4. Check “Reset Password on behalf of user” to provide this permission for all users in the selected OU.
5. Click “Save.”

If you do not want to provide these permissions, you can keep these options unchecked.