There is a lack of supporting documentation, especially diagrams, around how your partner tenant's Rewst and Rewst App interact with the Customer tenants when workflows are executed. Partner Center has a pretty explicit Relationship -> Granted Roles -> Roles assigned to specific group or users visual, and supporting logs. There is not the same level of representation of the actual grant to the Application itself to the customer tenant inside Entra ID. This creates risks for providers who need to document their permissions to customers or an auditor, and issues when attempting to troubleshoot problems with the application or GDAP permissions, and communicate effectively with ROC support.
