diff --git a/Config/AXE-TENANT.BPATemplate.json b/Config/AXE-TENANT.BPATemplate.json
index cf483c33858f..3f0a9573bc34 100644
--- a/Config/AXE-TENANT.BPATemplate.json
+++ b/Config/AXE-TENANT.BPATemplate.json
@@ -27,6 +27,7 @@
       "ExtractFields": [
         "State"
       ],
+      "where": "$_.State -eq 'Enabled'",
       "StoreAs": "bool",
       "FrontendFields": [
         {
@@ -44,6 +45,7 @@
       "ExtractFields": [
         "State"
       ],
+      "where": "$_.State -eq 'Enabled'",
       "StoreAs": "bool",
       "FrontendFields": [
         {
@@ -61,6 +63,7 @@
       "ExtractFields": [
         "State"
       ],
+      "where": "$_.State -eq 'Enabled'",
       "StoreAs": "bool",
       "FrontendFields": [
         {
@@ -78,6 +81,7 @@
       "ExtractFields": [
         "State"
       ],
+      "where": "$_.State -eq 'Enabled'",
       "StoreAs": "bool",
       "FrontendFields": [
         {
@@ -95,6 +99,7 @@
       "ExtractFields": [
         "State"
       ],
+      "where": "$_.State -eq 'Enabled'",
       "StoreAs": "bool",
       "FrontendFields": [
         {
@@ -112,6 +117,7 @@
       "ExtractFields": [
         "State"
       ],
+      "where": "$_.State -eq 'Enabled'",
       "StoreAs": "bool",
       "FrontendFields": [
         {
@@ -129,6 +135,7 @@
       "ExtractFields": [
         "State"
       ],
+      "where": "$_.State -eq 'Enabled'",
       "StoreAs": "bool",
       "FrontendFields": [
         {
@@ -194,6 +201,23 @@
         }
       ]
     },
+    {
+      "name": "AllowedToCreateTenants",
+      "API": "Graph",
+      "URL": "https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizationPolicy",
+      "ExtractFields": [
+        "defaultUserRolePermissions.allowedToCreateTenants"
+      ],
+      "StoreAs": "bool",
+      "FrontendFields": [
+        {
+          "name": "Tenant Creation Disabled",
+          "desc": "Check if users are allowed to create tenants",
+          "value": "AllowedToCreateTenants",
+          "formatter": "reverseBool"
+        }
+      ]
+    },
     {
       "name": "MessageCopyforSentAsDisabled",
       "API": "Exchange",