Employee contacts admin → admin resets for them
Employee: "I forgot my password"
↓
Tells admin
↓
Admin calls PATCH /api/users/{id}/reset-password
↓
System generates new temp password
↓
Sends email to employee
↓
Employee logs in with temp password → forced to change
Employee contacts admin → admin resets for them
Employee: "I forgot my password"
↓
Tells admin
↓
Admin calls PATCH /api/users/{id}/reset-password
↓
System generates new temp password
↓
Sends email to employee
↓
Employee logs in with temp password → forced to change