There is currently no way for non-admin users to change their passwords. This creates a security issue as they have to request the changes to be made by an admin.
Please add this soon!
Orion passwords need improvements of management - see also
It should force users to change their password after first login.
And definitely Orion passwords should have option for rule to define according security policy.