SAPSR3 Password Policy

Hi All

I need to reset the SAPR3 & SAPSR3 passwords in my landscape (ECC 5.0 and ECC 6.0 respectively), and need to find out if SAP defines any specific standard policy to confirm the password rules. My main concern is whether - We can include special characters (and how many) to make the password and in turn, security even more robust.

Also, kindly confirm if the user SAPSR3 can be included in any other group (other than Default).

Kindly assist.

regards

Kunal Pahwa