add "tenanted" scope