Tenant:User, not User:Tenant.