Ronny is blocked from copying to USB. Eli is not.
The DLP ring treats everyone the same. Adaptive Protection lets Insider Risk Management give users a risk level, Elevated, Moderate or Minor, and DLP, Conditional Access and Data Lifecycle Management act on it. We turn it on with quick setup, look at the levels, and see Ronny blocked from copying a file to USB while Eli is not.
Step through More in Insider Risk Management