How does the Device Policy app work?

Question

Google

I have two mail: personal and work from the organization.
I tried to connect work mail on my mobile, i.e. entered login, password, etc.
As a result, a window popped up that, for the security of this mailbox, I must set the Device Policy, otherwise it will not work.
Ok installed. But according to the description of this software, I did not understand what exactly it does.
Now I have a Work folder, which contains applications related to this work mail.
I still do not understand, the administrators of my organization, from which this mail is given, will now be able to manage these applications in the Work folder or what?

Answer 1

The administrator can configure the following security rules:
password strength and required length on the device;
Numeric value for the following parameters: the
number of invalid password entries left before the device is wiped;
number of expired passwords blocked;
the number of days before the device password expires;
duration of the device inactivity before automatic blocking (in minutes);
the duration of the period without synchronization, after which all data is erased from the device;
application verification;
remote device wipe or account deletion from the device;
device policy application version requirements;
blocking hacked devices.
https://support.google.com/a/users/answer/190930?hl=en
Thus, the admin can completely clean the device