Ability for users to change password in 3.7.1 / 4.0 CE version

[lpeel]

Hi

I have a few questions about CE 3.7.1  /  4.0.   With default roles, a user can be only user or administrator.  My questions are:

1. How to enable a user to change their own password if they only have a user role?

2. Example of how to define a new role that allows a user to create his or her own folder (eg joe_user_reports).

3. If reports are being used internally with a base of no more than 20 users, is it ok for me to create an individual account for each?  Its what I was planning on doing but wanted to know if there were drawbacks to this approach.
An alternative suggestion was for me to create a single user account that everyone uses.  I appreciate feedback either way.

Thanks!