You need to ensure that User$1$ can reset the passwords of non$-$administrative users. The solution must follow the principle of least privilege.