I have an automated test for Microsoft Entra ID regarding “Minimum password length” that is currently showing as Failed.
The test report itself acknowledges this is a known platform limitation, stating:

“[2021-11-15 Ver 1] The test always fails, because Azure AD password policies default setting is 8 for password minimum length, that cannot be changed, so test never meet the password minimum 12 length criteria.”
How do I properly document this in Trustcloud? I need to:
Add an exception/compensating controls for this test
Upload evidence showing our compensating controls (MFA, Conditional Access, Password Protection, etc.)
Change the status from “Failed” to “Risk Accepted” or similar
I cannot leave this as a failing test for my SOC2 audit when it’s an acknowledged Microsoft platform limitation.
What I need to know:

Where in the Trustcloud interface can I add an exception for this automated test?
What is the proper workflow for documenting compensating controls?
Can automated tests be marked as “Accepted Risk with Compensating Controls”?
Do I need to upload specific evidence files, or is there a form to fill out?

Please advise on the recommended approach for handling automated tests that fail due to third-party platform limitations beyond our control.
Thank you!