Question

Your company wants to pilot self-service password reset (SSPR) before rolling it out organization-wide. The IT security team asks you to enable SSPR only for members of a group named PilotUsers, while all other users remain unable to reset their own passwords. In the Microsoft Entra admin center, under Password reset > Properties, which option should you select?

Accepted Answer

Set Self service password reset enabled to 'Selected' and choose the PilotUsers group

Answer

Set Self service password reset enabled to 'All' and create a Conditional Access policy excluding non-pilot users

Answer

Set Self service password reset enabled to 'None' and add PilotUsers to the Global Administrator role

Answer

Enable password writeback and assign the PilotUsers group an SSPR-specific license