Tenant user role
This role is created automatically during the installation of Moodle Workplace. It is automatically assigned to all tenant users in the context of the tenant's course category.
This role by default only allows the moodle/category:viewcourselist capability. As mentioned in the Moodle Workplace Installation page, this capability is removed from the Authenticated user and Guest roles. This means that tenant users can only browse courses in the tenant's course category, and cannot browse courses elsewhere.
The site administrator may decide to allow more capabilities to this role, for example the moodle/course:request capability.