Block USB storage access?

Is there an Intune policy that applies to Surface Hubs to block both reading and writing to USB storage devices?
I’m not sure the USB policy used on standard Windows 10 Pro/Enterprise devices would be recognized by Surface Hubs running Windows 10 Teams.