1. An apparatus comprising: a multi-tenant datastore; and a processor coupled to the multi-tenant datastore, wherein the processor is configured to: receive a request comprising one or more security tokens, wherein the one or more security tokens comprise identification information; and generate a query based on the request to access the multi-tenant datastore, wherein generating the query comprises deriving a query scope based on the one or more security tokens.