Does that mean that it wouldn't be possible for a global admin user to override a value for a tenant when tenantOverride is false? I see no reason for us to restrict that for global admins. There could always be a reason for a global admin to make an exception (e.g. stop processing activities for a given tenant for a certain amount of time).