Create, read and delete tenants. All actions are audit-logged on the admin service; requires the VeritasIQ Admin role.