Password reset can be done by user if enabled by administrator.
Administrators may enable it by following the instructions here - https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/let-users-reset-passwords?view=o365-worldwide
Once enabled, user will be required to provide their mobile number for verification of their identity during self-service password reset process.
The url for password reset is https://passwordreset.microsoftonline.com/
