In the case of corporate-owned devices enrolled, I setup via an android configuration profile.
These options were included.
I wanted to preset the PIN, but couldn't.
I know that doesn't do all you want, but there is no mention of what you want in:
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android
Also, the enterprise settings:
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-for-work
You may find the OMA-URI settings you want online and apply them via:
https://learn.microsoft.com/en-us/mem/intune/configuration/custom-settings-android