Each backend user can reset his password. The user can enter his email or username. The password will be reset in the db and send per mail to the corresponding user. If the backend user has not entered an emailaddress, there is no chance to reset the pass