Access control maintained by service provider administrator

In this scenario, Calbro maintains the users and user groups for Acme. Access to features and objects is controlled by authorization profiles in the * tenant. 

Acme's tenant administrator can view Acme's users and user groups from User Accounts in the TrueSight console. However to edit or delete the users and user groups, the Acme administrator must approach the Remedy Single Sign-On administrator at Calbro and request the changes. 

Because * tenant authorization profiles apply across all tenants, the authorization profiles maintained by the service provider are also available for use by Acme.