So there is passwd check for app users, like at least x characters long, with mixed letters, numbers, etc.

Is the same strength check applied to management user? I would assume management user passwords have more stringent requirement, at least should be the same as app user. But I can create a management user using password that consists of all letters (more than 8 letters).