the ideal world we could create a relationship for a user to a tenant and only allow them to view vendors