User configure some target account is Administrator and Account can change own password
But he configure he cannot change password by himself on OS side.
After that, he can change password via Target Account tab.
Why is it able to change password by himself?
Windows Remote Connector in CA Privileged Account Manager 3.x
At Windows Remote connector, it works as expected.
If user cannot change password by himself, PAM tries to change password by one by one in a list of Administrator on the Target Application.
So, one or more Administrator in Target Account on the connector need privilege to change password another user.