Actually, I just discovered a flaw in this approach. As we are using `ctx.tenant().alias`, this is always going to limit the results to the global admin tenant for the global admin (at least when using the global admin tenant). Therefore, we should allow for the tenantAlias to be passed in (for global admin users only), and use that here.