title: IAM role for multi-tenancy (Identity platform)
body: <p>I am currently working on multi-tenancy using admin auth as per the documentation: <a href="https://cloud.google.com/identity-platform/docs/multi-tenancy" rel="nofollow noreferrer">https://cloud.google.com/identity-platform/docs/multi-tenancy</a></p>
  <p>I initialized a Tenant Auth with a registered tenantId:</p>
  <pre><code>const tenantManager = admin.auth().tenantManager();
  const tenantAuth = tenantManager.authForTenant(tenantId);
  let tenantData = await tenantManger.getTenant(tenantId)
  </code></pre>
  <p>When I perform any operations using this tenantAuth or get the tenant data, I get the following error</p>
  <blockquote>
  <p>An internal error has occurred. Raw server response: &quot;{&quot;error&quot;:{&quot;code&quot;:403,&quot;message&quot;:&quot;The caller does not have permission&quot;,&quot;status&quot;:&quot;PERMISSION_DENIED&quot;}}&quot;</p>
  </blockquote>
  <p>I can understand it is an IAM role required for the service account key I used for initializing the admin SDK. Can anyone tell what's the valid role to be added?</p>