You can define different access levels for each profile to allow or disallow write access. The password reset page helps your deskside support staff to reset user passwords.
There are three access levels:
Write access (default)
There are no restrictions. LAM admin users can manage account, create profiles and set passwords.
Change passwords
Similar to "Read only" except that the password reset page is available.
Read only
No write access to the LDAP database is allowed. It is also impossible to manage account and PDF profiles.
Accounts may be viewed but no changes can be saved.
The access level can be set on the server configuration page:
