diff --git a/avm/res/net-app/net-app-account/capacity-pool/volume/main.bicep b/avm/res/net-app/net-app-account/capacity-pool/volume/main.bicep
index 2c48241d58..830793717e 100644
--- a/avm/res/net-app/net-app-account/capacity-pool/volume/main.bicep
+++ b/avm/res/net-app/net-app-account/capacity-pool/volume/main.bicep
@@ -91,6 +91,71 @@ param smbContinuouslyAvailable bool = false
 ])
 param smbNonBrowsable string = 'Disabled'
 
+var formattedRules = [
+  for rule in (exportPolicy.?rules ?? []): {
+    ...(!empty(rule.?kerberos5ReadOnly)
+      ? {
+          kerberos5ReadOnly: rule.kerberos5ReadOnly
+        }
+      : {})
+    ...(!empty(rule.?kerberos5ReadWrite)
+      ? {
+          kerberos5ReadWrite: rule.kerberos5ReadWrite
+        }
+      : {})
+    ...(!empty(rule.?nfsv3)
+      ? {
+          nfsv3: rule.nfsv3
+        }
+      : {})
+    ...(!empty(rule.?nfsv41)
+      ? {
+          nfsv41: rule.nfsv41
+        }
+      : {})
+    ...(!empty(rule.?unixReadOnly)
+      ? {
+          unixReadOnly: rule.unixReadOnly
+        }
+      : {})
+    ...(!empty(rule.?unixReadWrite)
+      ? {
+          unixReadWrite: rule.unixReadWrite
+        }
+      : {})
+    ...(!empty(rule.?kerberos5iReadOnly)
+      ? {
+          kerberos5iReadOnly: rule.kerberos5iReadOnly
+        }
+      : {})
+    ...(!empty(rule.?kerberos5pReadOnly)
+      ? {
+          kerberos5pReadOnly: rule.kerberos5pReadOnly
+        }
+      : {})
+    ...(!empty(rule.?kerberos5ReadOnly)
+      ? {
+          kerberos5ReadOnly: rule.kerberos5ReadOnly
+        }
+      : {})
+    ...(!empty(rule.?kerberos5iReadWrite)
+      ? {
+          kerberos5iReadWrite: rule.kerberos5iReadWrite
+        }
+      : {})
+    ...(!empty(rule.?kerberos5pReadWrite)
+      ? {
+          kerberos5pReadWrite: rule.kerberos5pReadWrite
+        }
+      : {})
+    ...(!empty(rule.?kerberos5ReadWrite)
+      ? {
+          kerberos5ReadWrite: rule.kerberos5ReadWrite
+        }
+      : {})
+  }
+]
+
 var builtInRoleNames = {
   Contributor: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'b24988ac-6180-42a0-ab88-20f7382dd24c')
   Owner: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', '8e3af657-a8ff-443c-a75c-2fe8c4bcb635')
@@ -222,7 +287,12 @@ resource volume 'Microsoft.NetApp/netAppAccounts/capacityPools/volumes@2024-03-0
     usageThreshold: usageThreshold
     protocolTypes: protocolTypes
     subnetId: vnet::subnet.id
-    exportPolicy: exportPolicy
+    // exportPolicy: exportPolicy
+    exportPolicy: !empty(exportPolicy)
+      ? {
+          rules: formattedRules
+        }
+      : null
     smbContinuouslyAvailable: smbContinuouslyAvailable
     smbEncryption: smbEncryption
     smbNonBrowsable: smbNonBrowsable
diff --git a/avm/res/net-app/net-app-account/tests/e2e/max/main.test.bicep b/avm/res/net-app/net-app-account/tests/e2e/max/main.test.bicep
index 913ad76d71..9f82ab69cd 100644
--- a/avm/res/net-app/net-app-account/tests/e2e/max/main.test.bicep
+++ b/avm/res/net-app/net-app-account/tests/e2e/max/main.test.bicep
@@ -134,11 +134,12 @@ module testDeployment '../../../main.bicep' = {
               rules: [
                 {
                   allowedClients: '0.0.0.0/0'
-                  nfsv3: false
+                  // nfsv3: false
                   nfsv41: true
                   ruleIndex: 1
-                  unixReadOnly: true
-                  unixReadWrite: true
+                  // unixReadOnly: true
+                  // unixReadWrite: true
+                  // kerberos5ReadOnly: true
                 }
               ]
             }