Permissions in multitenant

I am wondering how permissions are managed in a multi tenant environment. I have installed a multi tenant test environment, and to my surprise permissions are managed individually in each tenant. I am wondering if there is anyway permissions can be centrally managed from perhaps the app database.

This is for a large customer that spans across several geographical locations. And for easier management, they are looking into splitting the database into tenants by geographical locations.

Tq.