It doesn't feel like adding the tenant alias to the ops object is the right thing to do. The additional options are all properties that will be set on the user, whilst the tenant determines where the user will be created /cc @mrvisser @simong