Manage M365 Secure Score Third Party Configuration Exceptions

We have a number of secure score settings that we want to set as being delivered through a third party. Currently, we can set the policy in Nerdio for controlling a MS setting, but not to state we are doing it externally. This means for a significant number of services that we manage (eg. Avanan for email security) we have to manually configure customer tenants, even though all of our customers have exactly the same config.