if you used that schema, then if a user is

viewer

on the

tenant

or the

vendor

, they can

view

the tenant