Azure policy to deny vm creation without Azure Hybrid Benefit, but exclude user

Hello,   I need to create policy that denies vm without Azure Hybrid license, but exclude enterprise application.   Is there a mechanism in Azure policy to validate current user?   Thanks