Context:
Collection scopes can contain "Unauthorized Tenant" for which the user lacks authorization. The user should not be able to deselect those tenants in the Collection Scope edit modal.

AT:

• "Unauthorized Tenant" entries cannot be deselected in the collection scope edit modal
• "Unauthorized Tenant" entires are identified by their specific id, see https://app.camunda.com/confluence/display/CO/Collections#Collections-GetScopesofacollection

Design:

https://app.zeplin.io/project/5b4f294ab0d5cf0c2c391d1d/screen/5db2d489959ae3560404d842

see modal in second row last column