ListGrants

The active grants inside one tenant namespace, with each holder's identity. A seat holding iam:tenants:grant, or a delegate of that namespace — who gets legal_name AND preferred_name empty: the team sees each other's email, username and grant, and nothing that says who an address belongs to.