+1! having the user manage their own stuff is just asking for more headaches on our side. have you met the user? asking them to log in to a portal to do anything with their phone makes heads explode. they will forget the portal password, they will get lost in it, they will click everything and break stuff... the list goes on and on. It could be set for the admin to click a button in the management portal to send a reset email to the user.