You should be able to grant access to the specific tenant that is using the network and then remove the wildcard policy.
You should be able to grant access to the specific tenant that is using the network and then remove the wildcard policy.