One approach, assuming you are talking about relational databases: ensure that every query contains the tenant-id and the tenant-id is a key in all relevant tab

One approach, assuming you are talking about relational databases: ensure that every query contains the tenant-id and the tenant-id is a key in all relevant tables. No way of balancing tenant load in this model, though, unless you can balance at the query level.