This article describes how to configure NetScaler Command Policy to allow read-only users to change their password.
Complete the following steps to configure NetScaler Command Policy to allow read-only users to change their password:
Navigate to System > User Administration > Users > Command Policy Select the user for which the policy needs to be added/modified.
Edit/Add the following policy:
(^(show)\s+system\s+user)|(^(rm|set|show)\s+system\s+user\s+test)|(^(rm|set|show)\s+system\s+user\s+test\s+.*)
In the preceding example "test" is the username.
Specify the action as Allow to allow access for the commands and Bind the Policy to the User created
Citrix Documentation - Configuring Users, User Groups, and Command Policies