Is this AP in a private network just for that customer or is it for many people to access?
If just for that one customer then he should be able to log into it and change the password, if the AP is for many customers, then only the owner or admin should be able to change the password.