Can interact with roles.
Can add and delete tenants.
Can list users for a tenant.