You have a Microsoft Entra tenant that contains the users shown in the following table.

Per Microsoft SC-300: Manage administrative units and delegated roles, administrative units (AUs) allow scoping of administrative privileges to subsets of users or groups within a tenant.

In this case, User5 is assigned the User Administrator role for AU1. This means User5 can only manage users and groups that are members of AU1. From the given table, Group1, User2, and User3 are part of AU1.

Therefore, User5 can reset passwords for users who are either:

Members of AU1 directly (User2, User3), or

Members of groups that belong to AU1, if those groups’ members fall under delegated scope.

However, User1 and User4 are not part of AU1, and User5 has no administrative control over them.