Different Security Rules for device types

Hello, I’m quite new to SEP Cloud and can’t figure out a way to set up different security rules for device types.

The situation: I’ve got Windows 10 notebooks and Android mobiles as devices – usualy all users being assigned a notebook and a mobile as well.
While I want to enforce password rules for the windows devices, I don’t want to for Android (as fingerprint etc. is not supported).

AFAIK I can assign rules to groups (and thus to users) but not specifically to devices, I’m wondering how the desired effect could be achieved.

Thanks for your help,

Marc