Security Rule: How to write a rule that blocks ExportAppData for all apps except the monitoring apps

jblomqvist — Mon, 08 Apr 2019 09:18:05 GMT

Hello all,

How can I write a rule that blocks access exportappdata functionality on all apps except the two monitoring apps?

Can anyone please give me the expression?

Re: Security Rule: How to write a rule that blocks ExportAppData for all apps except the monitoring

Levi_Turner — Mon, 08 Apr 2019 14:19:31 GMT

Step 1: Disable the default rule ExportAppData

Step 2: Create a new rule:

Filter: App_*
Action: Export Data
Conditions: ((resource.stream.name="Monitoring apps") and resource.HasPrivilege("read"))
Context: Only in Hub

As a note, I had to restart the Engine Service to get reliable results. There must be some caching at the Engine layer which was interfering with things.

topic Security Rule: How to write a rule that blocks ExportAppData for all apps except the monitoring apps in Management & Governance

Security Rule: How to write a rule that blocks ExportAppData for all apps except the monitoring apps

Re: Security Rule: How to write a rule that blocks ExportAppData for all apps except the monitoring