Respect tenant info from repose

RM7001
So no tenant or user = admin? I'm guessing that Repose should only pass back requests with these two params? A little unfamiliar with the flow here...