I think they definitely should be able to. How else can a password be self service for someone that you grant admin?