Intune - Applocker - Scripts

[petben]

Hello, I have an 'EXE' AppLocker policy working fine in Intune (created by exporting the .xml from local GPO and creating a custom Intune policy), but my Q is with a similar 'Scripts' AppLocker policy, how do I stop these rules applying to administrators (this will be Azure admins presumably). Do I need to change the exported default rules allowing 'BUILTIN\Administrators' to some Azure group or user or email address or something?

 

Thanks