When the CMM security policy is set to Legacy, CMM user account policy settings are not restricted. The default Legacy user account policy settings can be used or these settings can be modified.
The Legacy user account policy establishes a lower level of control over users. It provides a less secure chassis environment than the High setting. If the Legacy user account policy is selected, you can override its default values to create a Custom policy by using the CMM web interface or the CMM CLI. See User account policy settings for information about user account policy settings, how to modify these settings, and the differences between the High and Legacy user account policies.
You can select the user account security policy by using the CMM web interface or the CMM CLI: