AT:

• I can only create a process / case instance if the definition belongs to one of the authenticated tenants
• if no authenticated tenant id is set then I can only create instance of definitions which belongs to no tenant
• if no authentication is set (i.e. no user id) then I can create instances of all definitions