The registration endpoint accepted a role attribute, so the agent created an administrator, exchanged it for a token with admin scope, and read billing records for all four tenants.