Based on the screenshots, they could trigger password reset emails. They couldn't directly set the new password.

Not defending Okta's response here; I think it has been quite terrible.