Currently it’s possible to limit rights of a Team to specific tenants but not to a tenant tag. With ~20 tenants and more it's really hard to maintain this. Also the list would become so long. It would really help to specify just the tenant tag.

In our case we have only one risky tenant which should be assigned to a small Team. But we have to add all 19 less risky tenants to the bigger Team.