confinedTo

The one tenant caller reaches (reaches): its own; null for a caller that may act across scopes, which reaches every tenant. A read that a store filters by tenant takes it.