The absence of a "forgot password" function means the admin has to go in and "reset" the password when the user should be able to request it. I can't recall any system I've used in the last couple of decades that didn't have a password recovery option.