You can configure a password policy, which must be followed by the device user:

For devices enrolled in the ‘Android standard’ mode, only the ‘device password’ is considered, and it is only possible for devices with Android 9 or lower.

For devices in Android Enterprise mode with COPE, only the ‘device password’ policy is considered.

For devices in Android Enterprise mode with Work Profile, both policies can be specified. If both policies are specified, the user must set two passwords, one to unlock access to the device as a whole, and one to unlock access to the Work Profile.

It is noteworthy that the policy configuration does not create passwords, but only forces the user to create them following the determined pattern.