What must be the minimum limits of delegation for authanticated user ? Is it enough just "reset password" delegation ?