Password complexity rules like "requiresLowercase", "requiresNumber" etc. are there if they are required but assumed to be "false" if they are missing.
They would also be totally ignored if "isRequired" is false.
If the whole "passwordSettings" object is missing, isRequired would be assumed to be false.
Requires: seismic.delivery See Permissions for additional details.