To support multi-tenancy, an administrator must create or enable which type of unique login account?

vsadmin is a Vserver-scoped role, not a cluster-scoped role, so associating it with the cluster is technically incorrect.

The 'admin' account is the cluster administrator account and does not provide per-Vserver tenant isolation.

The cluster 'admin' account has cluster-wide privileges and is not a tenant-specific account, making it unsuitable for multi-tenancy.

vsadmin is the built-in administrative account scoped exclusively to an individual Vserver (SVM), limiting its permissions to that Vserver's resources only. This per-Vserver account isolation is the technical mechanism that enables multi-tenancy in ONTAP Cluster-Mode. Each tenant receives their own vsadmin credential without visibility into other Vservers or cluster-wide settings.