Tenant memberships

Membership operations require server authorization and emit audit events. Browser supplied tenant identifiers are never treated as authorization.

• Invite tenant member
• Disable tenant membership
• Assign approved tenant role
• Review tenant audit events