Resolving tenant hierarchy & security context