Service Account
When the API service is configured in Service Account mode, API users can act as both Provider and Tenant. Privileged Tenant behavior (for example, creating Instances by Machine ID) is determined by siteCapabilities on a Ready Tenant Account, not by tenant-level configuration.