Additional caveat of authorization among tenant hierarchies: added
multi-attribute values for tenant and a PrimaryTenant attribute