How to Cisco ACS 5.x allows user to change a pwd themselves?
Enable User Change Password (UCP) web service for allowing user to change their password themselves.
Default setting is "disable"
To enable the UCP, access SSH to the system / CSASC-1121 and apply command below
ACS5.x/admin# acs config-web-interface ucp enable