such as having a

tenantuser

definition that is the subject of your requests, rather than a

user

that has a tenant id on its relationship caveat context