Currently you can set a condition to a step so that it is only run on tenants with certain tenant tags.

If I know want to run one step on tenants with a tag but not run a second step with a the same tenant tag (different configuration for these tenants) I have to use conditions field instead. This gives a very unclear overview of the process as it appears to that both step run on tenants with the tag.

Ideal would be
* Step A run on tenants with Tag A.
* Step B run on all tenants except those with Tag A.

This would make it very clear and I can easily create a tag Special-Security-Config-Tenant and make it clear which steps run what. I can create a negative tag, but that will make me have to maintain that on all other tenants and remember to add them to it for every special tenant tag there is.