An admin should be able to update another user's information (including password, name, email, and user type [admin or staff]).
This information should be reflected in the database and the authentication process (i.e. users are going to log in with the new updated password, email).