Manage Tenants
As a Tenant Administrator, you are assigned the following roles:
assign_roles
manage_users
read_users
You can then assign roles to your users including all of the above roles in addition to the manage_apps role which allows users to create or revoke application credentials.
The following pages detail the functions available to you as a Tenant Administrator.