> * Should a single VM consume the entire dedicated host (like baremetal)?
No, that is not the use case from my point of view here.
> * Or does the tenant have exclusive access to the dedicated host and can fit as many VMs as possible on it (like the AggregateMultitenantIsolation filter)?
Yes. In "use case words" - the possibility to allow access to a specific compute node or group of compute nodes (host aggregates) to a single domain or project in a domain, or multiple projects (or domains) for that matter.
Answers to questions in comment #4:
> * Should a single VM consume the entire dedicated host (like baremetal)?
No, that is not the use case from my point of view here.
> * Or does the tenant have exclusive access to the dedicated host and can fit as many VMs as possible on it (like the AggregateMultit enantIsolation filter)?
Yes. In "use case words" - the possibility to allow access to a specific compute node or group of compute nodes (host aggregates) to a single domain or project in a domain, or multiple projects (or domains) for that matter.