How do you exclude Azure Cloud Only users from managed scope? Not just one or two of them, but all of them.
