What exactly can Outlook remote-wipe when using multiple accounts and how I can I prevent havoc via root?

On my Huawei P20lite I can add multiple users or use the "Private Space" feature (which to my understanding [boils down](https://www.androidpit.com/how-private-space-works-android) to just another user account as well). Now, from the screenshots in [another SE question](https://security.stackexchange.com/q/174136/3272) : What gets me worried is the "Erase _all_ data" permission. So assuming I'd set up a secondary account and my employers IT decides to trigger this remote wipe, will only that account's data be affected or would this concern the entire phone? What will happen to my SD card data? My phone is rooted, is there any way I can ensure that this can only wipe Outlook data (if anything at all)?