Currently any user in sage including the admin can use the password "sage" or any other insecure combination of letters.
Can I request the ability to enforce password complexity as this is a requirement on Cyber Essentials Accreditation and ISO 27001