Options Generate random password or Set password manually + Change password for domain can only be used with service connection. If Set password manually option is selected, and Change password for resource is not, then the account password is changed in the Indeed PAM only.