Updated Policy for Data Explorer (#251)

Azure · Dec 13, 2021 · f45e7f7 · f45e7f7
1 parent 571c618
commit f45e7f7
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/...itions/DataExplorer/params.policyDefinition.Deny-DataExplorer-TrustedExternalTenants.json b/...itions/DataExplorer/params.policyDefinition.Deny-DataExplorer-TrustedExternalTenants.json
@@ -38,7 +38,11 @@
                         },
                         {
                             "count": {
-                                "field": "Microsoft.Kusto/clusters/trustedExternalTenants[*]"
+                                "field": "Microsoft.Kusto/clusters/trustedExternalTenants[*]",
+                                "where": {
+                                    "field": "Microsoft.Kusto/clusters/trustedExternalTenants[*].value",
+                                    "notEquals": "[subscription().tenantId]"
+                                }
                             },
                             "greater": 0
                         }