When searching via Config Profile Payload type (namely Single App Mode in my case) the Exclusions array is empty. Not a permissions issue in Jamf (account used has all permissions required)