[bugfix] User `administrator` had no admin permission to `admin` tenant

I found that `isGlobalAdmin` was always `false`, though `admin:global` was `true`.

This PR fixed this problem.