Password policy for human-user accounts

Last Updated : Jun 10, 2026 |

Human-user accounts are accounts that require you to enter a password manually to access Avaya Aura® Device Services resources. To protect data and prevent unauthorized access to the system, Avaya Aura® Device Services provides default complexity rules for human-user accounts. Each password you create for human-user accounts must meet these requirements.

Avaya Aura® Device Services enforces the default complexity rules for the following human-user accounts:

  • Onboard Open LDAP

  • Keycloak administrator

  • SSH administration access to Avaya Aura® Device Services CLI

  • Keepalived authentication

  • Utility Server administration web console

  • Cassandra database administrator

If your organization requires a different password policy, you can modify the default complexity rules by using the sys passwdrules command.

Note:

  • Avaya Aura® Device Services does not enforce complexity rules for the following passwords because they are not configured on Avaya Aura® Device Services:

    • Avaya Aura® Device Services web administration portal password.

    • System Manager enrollment password.

  • Avaya Aura® Device Services does not apply complexity rules for the Keystore password because it is not considered to be a human-user account.