Tenant user role
This feature is part of Moodle Workplace, which is available through Moodle Partners.
This role is created automatically upon installation of Moodle Workplace. It is automatically assigned to all tenant users in the context of the tenant's course category.
This role by default only allows the moodle/category:viewcourselist capability. As mentioned in the Moodle Workplace Installation page, this capability is removed from the Authenticated user and Guest roles. This means that tenant users can only browse courses in the tenant's course category, and can not browse courses elsewhere.
In some installations the site administrator may decide to allow more capabilities to this role, for example the moodle/course:request capability.