No PIN / No Access

Hi All

I hope you are well.

Anyway, on Android Enterprise Fully Managed devices, I have an ask to to enforce a No PIN No Device Access policy.

These devices have the usual, where the PIN requirements are set with a device config policy and then checked with a corresponding compliance policy. But no where can I see "restrict use of the device til a PIN is set" setting.

Perhaps it's really obvious but is this possible?

Only obvious option I can is in the compliance policy settings on Actions for noncompliance as below:

Would this be the appropriate setting or are there others? And if the device is locked, is the user able to set a PIN?

Info appreciated.

SK