Should accept and promote (or throw?) an error through the callbacks so we can catch an issue setting up the tenant admins.