How to allow an user to deploy Decision Definitions only for his Tenant?

I’m new in Camunda.
I’ve implemented a rule engine with Camunda. Now I need to have different Tenants. Users should can deploy Decision Definitions only for their Tenants. I’ve created an user ‘admin1’, a group ‘group1’ and a tenant ‘tenant1’, have added admin1 to tenant1 and to group1. But he can deploy Definitions for all talents. How can I fix it in Camunda Admin? Can anyone help please?

An the second question a little bit more difficult: I need to create dynamic tenants in Back End with standard Decision Definitions. Do you have any idea? Thank you very much!

  1. How to allow an user to deploy Decision Definitions only for his Tenant?
  2. How to create Tenants in Back End (Java/Kotlin)?