Recently, I assisted a client in implementing the Microsoft Entra self-service password reset (SSPR) feature. Their requirement was that this service be enabled only for non-privileged accounts.