When an administrator adds a person to their organization in piper, a UserTenant record is created that binds the user's userId to the tenant's tenantId and assigns a role. This role is the organization-level role — separate from any per-site SiteAccess roles. A user can have UserTenant memberships in multiple tenant organizations, allowing consultants to access data for several clients from one login.
Technical section
Data model, API, and internals — visible to developers.