set_student_password
Destructive
Set a learner's password directly, replacing their existing credentials. Use only when the user explicitly asks for this action; otherwise, send a password reset link instead.
Instructions
Set a learner's password directly. This is an ACCOUNT TAKEOVER primitive.
`id` is the obfuscated Skilljar learner id, and `password` is the value to set.
Whoever knows the value can then sign in as that person. The learner is not
told, and their old password stops working.
You must pass `confirm=True`. In almost every case `send_password_reset` is the
correct tool: it emails the learner a link and never puts you in possession of
their credentials. Use this one only when the user has explicitly asked to set a
password directly and understands that.
The password must satisfy the organization's policy. It is never echoed back and
never appears in an error message.
Requires the `students:manage-password` OAuth scope AND the `people.destructive`
capability.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| confirm | No | ||
| password | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| note | Yes |