Clarify boolean logic of tenants & tenant tags on deployment targets
Multiple users at my company have encountered a fairly dangerous deployment target configuration behavior that isn't very clear in the UI. When you configure tenants and tenant tags on a deployment target, the logic is:
Specific tenants OR (tenants tagged <abc> AND <xyz> AND <etc.>).
The dangerous part is the OR. At first glance, beginners at my company have assumed that the tenant and tenant tag fields all have an AND relationship, so they select a specific tenant and various tenant tags that apply to that tenant. They assume this is straightforward, so they don't click the preview button that would show the list of tenants that satisfy their selection, which is unintentionally many. They only realize their mistake when they accidentally deploy projects to the deployment target that don't belong there.
I think the UI would benefit from a clearer indication of the OR relationship between the tenant field and tenant tag fields.