How To
Summary
While MAS provides several ways to reset or update a user password via the UI, User Import, or directly through the MAS API, these approaches are efficient only for single user operations.
However, organizations often need to update or reset passwords for hundreds or thousands of users simultaneously.
This document provides a detailed step-by-step guide on how to perform a bulk password reset using the MAS API combined with Postman Run feature.
Objective
The goal of this guide is to walk you through:
1. Generating the required x-access-token to authenticate against the MAS API.
2. Creating a Postman collection configured to reset a user password through the MAS API.
3. Preparing a CSV file containing the list of user IDs.
4. Running a Postman Collection in bulk so that all users in the CSV have their passwords reset automatically.
This procedure allows administrators to efficiently reset large batches of user passwords with a single execution.
NOTE: If you encounter issues, contact IBM Support. As Postman is not an IBM tool, reach out to your vendor for assistance with this tool.
Steps
Prerequisites
• Postman installed:
https://www.postman.com/downloads/
• Generate x-access-token following IBM's documentation:
https://www.ibm.com/support/pages/how-generate-x-access-token-be-used-mas-api
Install Postman and Create a New Collection
1. Open Postman and ensure you are logged into your account.
2. Click New -> Collection.
3. Provide a name for your collection, for example: "MAS API".
4. Save the collection.
Create the API Request to Reset a User Password
1. Click New -> HTTP Request.
2. Set the request type to POST.
3. Enter the MAS Password Reset API information:
https://api.<mas-instance-id>.<mas-domain>/v3/users/{{userid}}/password?emailPassword=true
Don't change {{userid}} because this is our variable.
Under Headers, add:
x-access-token:tokenvalue
Content-Type: application/jsonIn the Body, select "raw" -> JSON, and insert:
{
"token": "NewUserPasswordHere1c"
}
If you want a random password to be generated for the users instead of setting a specific password, simply specify:
{}
Save the request inside your MAS API collection.
Prepare the CSV File with User IDs
1. Open Excel (or another spreadsheet tool).
2. In the first row, define the variable name as used in your request {{userid}} and in the rows below, list each user's ID, one per line.
Example:
3. Save the file in CSV format, which is required by Postman.
Run the Collection in Bulk Using Postman
This is the key step where automation occurs.
1. In Postman, locate your collection.
2. Click the three-dot menu next to it.
3. Select Run Collection.
4. In the Collection Runner:
• Select only the POST request that resets the password.
• Upload your CSV file.
• The "iterations" count will update to the number of rows found in your CSV (i.e., the number of users).
5. The interface will show something like:
6. And click on "Run MAS API" button.
Validate de Results
Each request should return 200 OK
This confirms that the password reset was successful for that user.
If the users have a valid email address configured, they will receive the password by email.
If they don't, you can provide the password to the user, and they will be required to reset it on their first login.
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
27 February 2026
UID
ibm17253783