SOAJS gives you the ability to manage tenant users and groups in all environments from the console from under Manage tab Tenant Users UI. SOAJS also gives you the ability to manage the invited users to all sub tenants as well as manage their groups and pin login information if pin login is turned on. Below is a snapshot that shows the UI.
...
To be able to do this you need to add the iURAC app to any tenant you want to manage its users and groups from SOAJS console.
Here is what you need to do step by step: