Should we note that creating a user on a different tenant can only be done by a global admin user?