What you need for admin is the ability to specify a tenant whose resources to search.

That functionality covers the `includeExternal` functionality:

`tenant=cam` would be the same as searching on the cam tenant with `includeExternal=false`

So since they are contractually the same, is it not easier to just have one endpoint where you specify the tenant, rather 1 admin-specific one where you specify the tenant, and 1 user-specific one where you specify `includeExternal`?