Tenant administration
Uses `/api/v1/memberships/` and `/api/v1/invitations/`. Backend permissions decide access.