Remote reset of user passwords in 10.14.4, broken?

Not applicable

I created a profile that would lock a user account after x amount of failed password attempts, then tested it and got nicely locked out. Received a msg to contact the sysadmin which is me so looked at how to unlock the account but could not find anything in Jamf Cloud or Remote, I did see a password reset option so tried that but that fails, both via Cloud as a policy and via remote.

The management password was set to random so thought I would reset that so at least I could dive in via the hidden jamf-admin account but that also fails.

I'm confused now. Does local account password resetting work via Jamf or is that broken in 10.14.4? Not just changing passwords, creating a brand new account will also fail.