Teams as exception in conditional access

I have a specific group that will have access to Teams externally, but even creating the specific exclusion for it, it is being blocked. I saw that Sharepoint Online and Exchange Online also affect Teams, however the off-line release for this group is only for Teams and not the other applications. 

I have another group that accesses all cloud applications, including the exclusion of the blocking policy, however for this specific group I want to release only Teams with 2FA.