make it clear that the endpoint should include /portal/api
tenantparam can be found automatically from account data