Security Rule: How to write a rule that blocks ExportAppData for all apps except the monitoring apps

[jblomqvist]

Hello all,

How can I write a rule that blocks access exportappdata functionality on all apps except the two monitoring apps?

Can anyone please give me the expression?

[Levi_Turner]

Step 1: Disable the default rule ExportAppData

Step 2: Create a new rule:

• Filter: App_*
• Action: Export Data
• Conditions: ((resource.stream.name="Monitoring apps") and resource.HasPrivilege("read"))
• Context: Only in Hub

As a note, I had to restart the Engine Service to get reliable results. There must be some caching at the Engine layer which was interfering with things.