(issue #3895) move tenants API to admin