Azure policy to deny vm creation without Azure Hybrid Benefit, but exclude user

Hello,

I need to create policy that denies vm without Azure Hybrid license, but exclude enterprise application.

Is there a mechanism in Azure policy to validate current user?

Thanks