How to restrict vendor access to sensitive tenant data