require an admin to be created when creating a new tenant