System level functions are marked by predefined roles. The respective users who want to carry out the specific functions need to be allotted the specific roles.
-change-user-password (only to change other users passwords)
change-user-password: No role or permission is required to change self password. The connected user can change his own password using this command without the need to have any permissions for the same.