From f45e7f7c6b832bb71855132827adfbe545b7f44a Mon Sep 17 00:00:00 2001
From: Marvin Buss <34542414+marvinbuss@users.noreply.github.com>
Date: Mon, 13 Dec 2021 09:17:29 +0100
Subject: [PATCH] Updated Policy for Data Explorer (#251)

---
 ...Definition.Deny-DataExplorer-TrustedExternalTenants.json | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/infra/Policies/PolicyDefinitions/DataExplorer/params.policyDefinition.Deny-DataExplorer-TrustedExternalTenants.json b/infra/Policies/PolicyDefinitions/DataExplorer/params.policyDefinition.Deny-DataExplorer-TrustedExternalTenants.json
index 04e2f88..028c96e 100644
--- a/infra/Policies/PolicyDefinitions/DataExplorer/params.policyDefinition.Deny-DataExplorer-TrustedExternalTenants.json
+++ b/infra/Policies/PolicyDefinitions/DataExplorer/params.policyDefinition.Deny-DataExplorer-TrustedExternalTenants.json
@@ -38,7 +38,11 @@
                         },
                         {
                             "count": {
-                                "field": "Microsoft.Kusto/clusters/trustedExternalTenants[*]"
+                                "field": "Microsoft.Kusto/clusters/trustedExternalTenants[*]",
+                                "where": {
+                                    "field": "Microsoft.Kusto/clusters/trustedExternalTenants[*].value",
+                                    "notEquals": "[subscription().tenantId]"
+                                }
                             },
                             "greater": 0
                         }