title: Provide "Forgot Password" feature in Keycloak to certain users only
body: <p>We're using Keycloak 12 for authentication in our portal and there are two different types of users:</p>
  <ol>
  <li>Internal users (read from our internal LDAP)</li>
  <li>External users (stored in Keycloak but without being synced with the LDAP)</li>
  </ol>
  <p>We'd now like to use the &quot;Forget Password&quot; feature provided by Keycloak. After having configured the feature and the mail server, this works fine out-of-the-box.</p>
  <p>However we'd like to restrict the &quot;Forget Password&quot; feature to all users which belong to (2), i.e. the internal users. These users are not allowed updating their password via Keycloak as this is done by another mechanism.</p>
  <p>I couldn't find any information in the documentation so far if this is possible at all?</p>