Update notes for submitted changes

* Move get_all_tenants policy enforcement to API