`globalAdminOnly` would only determine that it can be seen by global admins only (both in global and tenant view), but `tenantOverride` would determine whether or not that global admin can override it in the tenant view. Tenant admins would not see the field and its configured value in their admin UI.

An example of such a field could be the configuration of where the files are stored (Local/S3), which we wouldn't want tenant admins to see.