How to I apply exceptions arc servers MDE

I can not seem to apply exclusion policies to my Defender for  cloud arc enabled win2k12 servers.

So I need to create a device group in Entra for these policies to be applied ?