how to configure specific cloud application access in branch office and remaining internet and inter

[RajeshSelvam]

I have multiple branches office and One Head Office,

In Head Office and Branches Office using Meraki Firewall . 

I am planning to do in branches office location only allow specific cloud application access and remaining traffic like internet (YouTube, Facebook, Google etc)   and internal server access allow from Head Office. 

[Malwina]

Hi! This should be achievable by the implementation of
https://documentation.meraki.com/MX/Site-to-site_VPN/VPN_Full-Tunnel_Exclusion_(Application_and_IP%2... 

and/or firewall rules 

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings 

getting all Spokes into a template
https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/...

or pushing the settings via API, for example:
https://developer.cisco.com/meraki/api-v1/update-network-appliance-firewall-l-7-firewall-rules/ 

[RajeshSelvam]

 As of now we have configured full tunnel Branch Office to Head Office and in Branch Office all internet traffic coming from HO.

In branches office location only allow specific cloud application access, How to configure and share the KB articles and required any routing.