title: DDD Multi tenant design
body: <p>I'm designing a generic multi-tenant identity system (Authentication / Authorization), but I have some doubt if I'm designing it the correct way.</p>
  
  <p>Currently, the design is this:</p>
  
  <p>AR <strong>User</strong> with reference to <strong>Tenant</strong> and a specific <strong>organizational unit</strong> where the user belongs to.
  AR <strong>Tenant</strong> has a list of entity <strong>Organisational unit</strong></p>
  
  <p>The <strong>Organisational unit</strong> in this context is a tree structure describing the organization, for example Aphabet -> Google -> Development</p>
  
  <p>My question is</p>
  
  <p>Should the <strong>organizational unit</strong> be a root entity as it is referenced by a <strong>user</strong> or is this allowed?</p>
  
  <p>I have modelled it as an entity of <strong>Tenant</strong> because the <strong>organizational unit</strong> cannot exist without a <strong>Tenant</strong>, so in my mind, the <strong>organizational unit</strong> should not be an AR.</p>
  
  <p>Any guidance is appreciated </p>