You can create a tenant admin user to manage data protection operations.
Create a hypervisor for the admin account (for example, for the MSP).
Create a company for the tenant account.
Create a role that includes the Global > Use Proxy permission.
Go to the hypervisor for the admin account and add the tenant admin user and role:
In the Security section on the Configuration tab, click Edit.
Add the tenant admin user, and then select the role that was defined in step 3.
Log on as the tenant admin user, create a hypervisor for the tenant account, and select the admin hypervisor using the Use service account resources option.