Not allowed to change password - cherwell desktop

Hi, I just did a quite major development in Cherwell Security. It included the Security Groups and the business objects. I have also reset all password for Cherwell users Desktop and requiring the user to change the password for the next login. 

But, when I tried to log in using one of my colleagues' credential. It is saying that the account is not allowed to change the password. I reckon it is related with the Business Object that I have changed, but I am not sure which one. Can anyone advise me on this please?