{
    "if": {
      "allOf": [
        {
          "field": "name",
          "notEquals": "RootManageSharedAccessKey"
        },
        {
          "field": "type",
          "equals": "Microsoft.EventHub/namespaces/authorizationRules"
        }
      ]
    },
    "then": {
      "effect": "Audit"
    }
}
