A "clean" multi tenant login separates the user from the account, i.e. the same user has different rights depending on the account he is using.
