diff --git a/ee/ucp/authorization/reset-user-password.md b/ee/ucp/authorization/reset-user-password.md
index 35cdc1bfc4..1b69bdc23b 100644
--- a/ee/ucp/authorization/reset-user-password.md
+++ b/ee/ucp/authorization/reset-user-password.md
@@ -4,27 +4,34 @@ description: Learn how to recover your Docker Enterprise Edition credentials.
 keywords: ucp, authentication, password
 ---
 
+## Change user passwords
+
+### Managed in UCP
+
 Docker EE administrators can reset user passwords managed in UCP:
 
 1. Log in to UCP with administrator credentials.
-2. Click **Users** under **User Management**.
+2. Navigate to **Access Control > Users**.
 3. Select the user whose password you want to change.
-4. Select **Configure** and select **Security**.
+   ![](../images/recover-a-user-password-1.png){: .with-border}
+4. Click **Edit**. Once on the "Update User" view, select **Security** from the left navigation.
 5. Enter the new password, confirm, and click **Update Password**.
 
-Users passwords managed with an LDAP service must be changed on the LDAP server.
+![](../images/recover-a-user-password-2.png){: .with-border}
 
-![](../images/recover-a-user-password-1.png){: .with-border}
+### Managed through LDAP
+
+User passwords managed with an LDAP service must be changed on the LDAP server.
 
 ## Change administrator passwords
 
-Administrators who need a password change can ask another administrator for help
-or use **ssh** to log in to a manager node managed by Docker EE and run:
+Administrators who need to update their passwords can ask another administrator for help
+or SSH into a Docker Enterprise [manager node](/engine/swarm/how-swarm-mode-works/nodes/#manager-nodes) and run:
 
 ```none
 {% raw %}
 docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect --format '{{ .Spec.TaskTemplate.ContainerSpec.Image }}' ucp-auth-api)" "$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0 }}' ucp-auth-api)" passwd -i
 {% endraw %}
 ```
-
-**Note**: If you are running in debug mode, the index 0 returns `--debug` instead of `--db-addr`. Make sure to exit debug mode before changing administrator passwords.
+### Known issue with DEBUG Global Log Level
+If you have `DEBUG` set as your global log level within UCP, running `$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0 }}` returns `--debug` instead of `--db-addr`. Make sure to exit debug mode before changing administrator passwords.