In the following configuration file, there are a number of configurations that can be set for Access service-related settings, including the password policy, as below:
security:
password-policy: # users' password policy
uppercase: 0 # minimum number of uppercase letters that the password must contain
lowercase: 0 # minimum number of lowercase letters that the password must contain
digit: 0 # minimum number of digits that the password must contain
length: 4 # minimum length of the password
not-match-old: true # should access allow setting a new password to the same one currently set for the user