diff --git a/ui/src/config/section/user.js b/ui/src/config/section/user.js
index 60a55973f8c0..a961a469c8ab 100644
--- a/ui/src/config/section/user.js
+++ b/ui/src/config/section/user.js
@@ -69,6 +69,10 @@ export default {
       label: 'label.action.change.password',
       dataView: true,
       popup: true,
+      show: (record, store) => {
+        return (['Admin', 'DomainAdmin'].includes(store.userInfo.roletype) || store.userInfo.id === record.id) &&
+          record.state === 'enabled'
+      },
       component: shallowRef(defineAsyncComponent(() => import('@/views/iam/ChangeUserPassword.vue')))
     },
     {