Columns: email, given_name, family_name, tenant_role, apps. The upload is dry-run first, then confirmed.