Hi Stanislav, thanks so much for your input. I am working with a customer with so many subscriptions with defender for cloud enabled. They are wondering if there is an ARM template available where they can automatically suppress rules across subscriptions instead of having to manually do it on the portal.