Context:
When a user is authorized to see a definition of a scope entry but not to some assigned tenants than these tenants should get masked.

AT:

• unauthorized tenant entries are `masked` as `Unauthorized Tenant` but still shown to every user authorized to see the definition