The 2nd and 3rd bullet seem to conflict in the proposed change:

* If the field can be seen and set globally by global admins, but cannot be overriden per tenant: `{'tenantOverride': false}`
* If the field can be seen and set globally by global admins, but can be overridden per tenant and cannot be seen by tenant admins: `{'globalAdminOnly': true, 'tenantOverride': false}`

Is there a typo in there? It's saying that `tenantOverride: false` indicates it cannot be overridden by tenant, but if `globalAdminOnly: true` is set as well, then it *can* be overridden per tenant?