I think it's important to ensure that the tenant admin is able to see the value that they set here though when it is `valueVisibility: private`. The tenant admin should be allowed to see `newcollectionid`. But if they clear the value, they should not be able to see `globaladmincollectionid`.