Create a blocklist entry. Apply it to every location in the company with allLocations, to specific locations with locationIds, or pass a single locationId (legacy; the resulting scope depends on the credential's access).