I apply policies to devices based on group associations, so it is dynamic.
Right now, we need to exclude some devices from some of the rules in the policies, but there’s no way to add a device as being excluded from the policy.
I created another policy and manually applied it to the devices, but the dynamic policy is still applied