add description for admin tenancy since ldap requires it