It can be anything! An apex, subdomain, or even a URL.
Invalid parameter:groupmemberships.officegraphauth.prod.partner.outlook.cn