Some tenants manage many domains and may wish to accept a risk for a specific domain rather than for the full tenant.