Capabilities/tool/tenant:manageusers
From MoodleDocs

- Allows to add, edit, suspend, unsuspend and delete users inside the current tenant in the Workplace Multi-tenancy feature
- This capability may only be applied in the system context.
- The default Tenant administrator role has this capability set to allow