One Time Exception DLP by Manager

Hello all,

I have a situation, for eg: Let's say I have a policy to block copying confidential file on USB. A user has violated the policy which generated an incident (emailed to manager). Now if the manager wants to allow this action for just one time, what would be the approach?

Would we have to add that user in exception so that policy doesn't apply to him and when he is done copying, we remove from the exception and update the policy.

Is there a simpler process?