I read information from link and resigns from idea to block users to viev information
about other users.
About password issue.
I'm creating a new user which is in default 'ipausers' group and are not
assigned to any role.
When I log using new created account I can reset others password.
Best Regards,
Mateusz