A tenant’s Cloud App Control policy permits Webmail globally. Security requires members of the Sales group to receive a CAUTION prompt when accessing personal Webmail, while all other groups must continue to receive unrestricted access.
Sales users and other groups are currently matched by a Cloud App Control rule that allows all Webmail.
Which action should the administrator take to meet the requirement for the Sales group?