I was asked yesterday whether it was possible to allow someone to change 2014 passwords via REST without giving them the admin console password.

I'm not aware of being able to use the REST API without using the console admin account. Attempting to authenticate using a system, domain or PO admin account all result in errors.

I just want to double check that I'm not overlooking anything here. If not, are there any plans to provide some granularity in management via REST e.g. to allow system, domain or PO admins to perform tasks within their areas of authority, or to provide the equivalent of eDirectory's "Password Management" right allowing delegation of password changes?

TIA, John