I think it should be fairly intuitive for devs that a user cannot create another user on a tenant that isn't their own.