Yes. Virtual Groups under a parent folder can be based on the many criteria such as OS version and then you can target Relocation Rules based on Virtual Group. 

Hi Matt

Thank you for your answer.

I've just tried and saw, that I can't assign any profiles to it.

This would be essential.

Is there any possibility to do so?

Best Regards

Beni

Due to various historical reasons, virtual groups are primary for use with rule policies and not for profile configuration policies 

For profiles, you can use profile filter to achieve automatic deployment, and is much easier than using rules to automatic relocate device to new deviice-group(s), especially in cases where affected devices are scattered in larger number of device-groups.

Assuming that your kiosk configuration is defined in a separate profile from any other policies, then you should have two profiles - one for Android 8.1 or earlier, and another for Android 9.0 (or later).  Then just add the profile filter to deploy only to devices with OS version smaller than 8.1 (as shown in the screenshot below) for the former profile, and larger or equal to 9.0 for the latter profile.   

Hi Raymond

This sounds really good :)

I will try it with thos filters, this should work for the configuration.

Thank you very much and best Regards

Beni