resource "microsoft365wp_device_management_configuration_policy" "pua_block" {
  name = "Disable PUA"
  settings = [
    { instance = {
      definition_id = "user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled"
      choice = {
        value = {
          value = "user_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled_1"
        }
      }
      }
    },
    { instance = {
      definition_id = "device_vendor_msft_policy_config_defender_puaprotection"
      choice = {
        value = {
          value = "device_vendor_msft_policy_config_defender_puaprotection_1"
        }
      }
      }
    }
  ]
  depends_on = [azuread_group.mem_windows_devices]
  assignments = [
    for x in [
      "${data.azuread_group.mem_windows_devices.object_id}"
    ] :
    { target = { group = { group_id = x } } }
  ]

}