ensure only superadmin can view/access tenant ui