… and sorry, to answer your first question:
In the real world, it is certainly possible to have a user who belongs to multiple tenants, but I don’t think I’ll ever want to support this within the app. As such, a user would only ever belong to one tenant (the parent), but a tenant could have multiple users.
Thanks