I don't think we should pollute our main APIs with admin level functionality. It makes our UI APIs a lot less friendly to use for widget development. Instead, I actually think the new `oae.api.admin.js` API can accommodate an `admin update user` function that takes the tenant alias (+ whatever else is required/not required).