Answers exactly one operational question: which tenants may support act as, and
until when.

Tenant identifiers and windows only. Three fields are

deliberately absent and each absence is a control:

• the tenant's reason text — it was written by the tenant for the tenant, and this list is precisely the screen that would aggregate every tenant's stated support rationale onto one page;
• the session JTI — a live revocation key, which never leaves admin-api on any surface;
• the declaring administrator — a named individual at a customer, serving no decision this list supports.

sessionActive distinguishes a tenant support is permitted to act as

from one it is acting as right now.