The Tenant Admin role typically contains Active Directory groups for cloud service provider administrators that manage the Tenant configuration of the vRealize Automation instance.