Authorize tenant+user before a purge