Determined by what we??re utilizing the domains for helps make a large variation as to which just one we use.Entry to ' tenant ' tenant is denied. AADSTS500021 indicates which the tenant restriction attribute is configured and the user is trying to access a tenant that isn't during the listing of permitted tenants specified in the header Prohibit-O