What does it mean if a "device administrator" can "change the screen lock"? If a corporate policy requires a mobile device management app (like Microsoft Intune), what does it mean in Settings-> Security-> Device Administrators when "Change the screen lock" is listed?  Is that just changing the style of lock (passcode, fingerprint), or does that allow the administrator to disable the lock altogether (e.g. to unlock the phone to inspect the data or reset the passcode).
It enables the app to change the lock code and lock you out of the device. In general trustworthy apps wpuldn't abuse this unless you request it. Like android device manager changing the code when you request it because of lost and stolen. Be careful with such a permission.