Hi Ben
there are no special rights needed - assuming you did not model/code any user rights into the app.
I assume you are using basic authentication and the user got created recently - with the need to change his initial password.
The basic authentication does not provide means for doing so. The form based does.
You can check this easily via right clicking in the Studio to the system connection and choosing "add additional user". If the password needs to be changed, you will know soon...
Best regards
\kc