Merge pull request #8274 from docker/ucp-admin-password

Admin password update when in debug mode

ee/ucp/authorization/reset-user-password.md

@@ -4,22 +4,29 @@ description: Learn how to recover your Docker Enterprise Edition credentials.
 keywords: ucp, authentication, password
 ---
 
+## Change user passwords
+
+### Managed in UCP
+
 Docker EE administrators can reset user passwords managed in UCP:
 
 1. Log in to UCP with administrator credentials.
-2. Click **Users** under **User Management**.
+2. Navigate to **Access Control > Users**.
 3. Select the user whose password you want to change.
-4. Select **Configure** and select **Security**.
+   ![](../images/recover-a-user-password-1.png){: .with-border}
+4. Click **Edit**. Once on the "Update User" view, select **Security** from the left navigation.
 5. Enter the new password, confirm, and click **Update Password**.
 
-Users passwords managed with an LDAP service must be changed on the LDAP server.
+![](../images/recover-a-user-password-2.png){: .with-border}
 
-![](../images/recover-a-user-password-1.png){: .with-border}
+### Managed through LDAP
+
+User passwords managed with an LDAP service must be changed on the LDAP server.
 
 ## Change administrator passwords
 
-Administrators who need a password change can ask another administrator for help
-or use **ssh** to log in to a manager node managed by Docker EE and run:
+Administrators who need to update their passwords can ask another administrator for help
+or SSH into a Docker Enterprise [manager node](/engine/swarm/how-swarm-mode-works/nodes/#manager-nodes) and run:
 
 ```none
 {% raw %}
@@ -27,5 +34,12 @@ docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect --format
 {% endraw %}
 ```
 
+### With DEBUG Global Log Level
 
+If you have DEBUG set as your global log level within UCP, running `$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0 }}` returns `--debug` instead of `--db-addr`. Pass `Args 1` to `$docker inspect` instead to reset your admin password.
 
+```none
+{% raw %}
+docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect --format '{{ .Spec.TaskTemplate.ContainerSpec.Image }}' ucp-auth-api)" "$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 1 }}' ucp-auth-api)" passwd -i
+{% endraw %}
+```