Using Intune and MDE to control removable storage device

Hi, I want to restrict the usage of removable storage device (USB drives) to all of our users in which: 1. Allowing users to READ ONLY to any removable storage devices; and, 2. Allowing selected us...