Sounds more like the core setup of your apps security, user roles and entity access than a requirement for a widget.
Read more about user roles, module roles and access here: https://docs.mendix.com/refguide/security
as well as this blogpost: https://www.mendix.com/blog/fundamentals-mendix-app-security/
Multi tenant is documented here: https://docs.mendix.com/howto/security/set-up-your-first-multi-tenant-app
in the App store you can find a Multi tenant administration module in case you need it: https://appstore.home.mendix.com/link/app/80498/
(the module is currently on version 7.22.2, you will need to add it to an app of version 7.23.x, export it from there and import your export to the version 8.5 you are using)