Demystifying attack surface reduction rules - Part 3

Thanks for this. I find it incredibly hard to know where to find things. There are so many products with ever changing names that do the same task. 

I have this application called Antidote written by Druide, and the Outlook addin is getting blocked. UI would like an exclusion. 

Where should I create a policy to exclude this executable?

I have nothing on-prem so it is somewhere in M365 / Intune or Endpoint protection. 

I know wherer to fin  https://endpoint.microsoft.com/#blade/Microsoft_Intune_DeviceSettings/DevicesMenu/configurationProfiles , sort of, but how do I find the OMA-URI for this ? And what is the data type?

But I also have policies in https://endpoint.microsoft.com/?ref=AdminCenter#blade/Microsoft_Intune_DeviceSettings/DevicesMenu/configurationProfiles which have ASR but no exclusions. 

All I want to do es exempt one executable for a group of users or computers...