How does SPP chage the passwords of accounts after check in?

Hi,

Change Password after check-in is set as part of the Entitlement > Access Request Policy > Security tab

Admin guide reference on Security tab can be found here: 

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.3/administration-guide/97#TOPIC-2015977

Yes, the Asset will need to be configured with a service account that has the rights to perform the password change against the managed account.

Please refer to the Admin guide section here on Domain Password management requiremets:

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.3/administration-guide/129#TOPIC-2016153

Thanks!