1. Registration with email and an email based flow to reset the password 2. User with admin permissions to change user passwords