add root user for tenant