All of these are for fairly coarse-grained multi-tenancy. For finer grained multitenancy, it may make sense not to provision the resources using Pulumi, and instead to manage the granular tenants using code at runtime.