What type of permission the credential used in Linux password change must have?

The credential must be an administrator credential.