Go to the master tenant
Select the application: /apiconfig/services/1/applications/1#
On the side menu click on the Applications
See the Application Plans
Click on the Applications Plans and get Forbidden
Description
Application plans in the master tenant should not be visible