Hey @mojawina
I was just working on this with my SSO users from Keycloak. My solution was within this_post.
Basical for my user to create a dasboard, I had to set the custum Roles then map the user with the custum tenant.