"Set additional password strength rules" in Password Rules should be click target. Use Orgs/People id as the "account code" does not user terminology.