Today, the basic CRUD operations are not permitted under multitenancy. For example, when you execute 'createCollection' and 'insert' command, you will get  error message "Command create is not supported in multitenancy mode". There is a "allowedWithSecurityToken" function of Command class used to determine if the command is permitted or not. 

In this ticket, we should enable the basic CRUD operations under multitenancy. Here is a serverless command list for reference.