tenantId

The tenant the caller acts in; null for a query bound to no tenant, such as trusted in-process code, and for a crossTenant query, which ScopeQueryPolicy restricts to its tenants instead.