Permissions
Requires ALTER ANY LOGIN permission.
If the login that is being changed is a member of the sysadmin fixed server role or a grantee of CONTROL SERVER permission, also requires CONTROL SERVER permission when making the following changes:
- Resetting the password without supplying the old password.
- Changing the login name.
- Enabling or disabling the login.
- Mapping the login to a different credential.
A principal can change the password for its own login.
Reference

