We need the ability to choose which users within an M365 tenant are protected with ITDR. We know in a perfect world that it is tenant wide, but we have customers that don't want to pay to protect every user, only the 'important' ones. Please give us the ability to do so, as these customers have now chosen to be removed from ITDR completely.