In the past, user management was done in Skykit Beam, and anyone who was an Beam administrator could add any user to their Tenant.
Now, user management is done in Accounts. Only users with the role of Account Owner can add users to the Account. (Instructions here.)
Once a user is added to an Account, a Tenant Admin is able to add that user to their Tenant. (Instructions here.)