How do users change their app lock preferences later? MAM Android

MAM policy requires app lock with PIN and the option for biometric. Android user originally told it to use fingerprint, now wants to switch to face recognition. How in the world do they switch that? Google keeps talking about some Security setting in Outlook that I don't have.

I tried changing my PIN but that didn't prompt any change to biometric preference.