- Introduce a Tenant Manager role for delegating tenant‑level user management
- Enable managers to invite, update, and revoke tenant members with scoped permissions, keeping sensitive settings restricted to Team Owners
- Log all management actions in Team Activity for compliance