Enforce Passcode on Android Enterprise?

Does anyone know how to enforce a passcode on Android enterprise devices? Compliance policy marks Android devices as non-compliant, While a similar policy makes iPhone users set or reset their pins. Device restriction does not work either - I have it as a separate item, and it throws an error without much detail, can't figure out whether it's conflicting with another Android profile or it's something else. I use a device group targeting 2x Android 11 and Android 12 phones.

Thank you