Unable to register for new user

Hi all, it appears new users are unable to register on Password Manager. On the first screen it's able to search for the user and after entering the password, it will respond with "Access Denied".

For the AD access, the service account have been granted Read All and Reset Password in the AD. What other permission is needed ?