Users should have a tenantId attribute.