In a multi-tenant application, I'm thinking of the right way to let a tenant add users to its account. Assume the "root" user (that signed up and created the tenant) already exists. At some point, the "root" user or other authorized users may add more users to the tenant. The main information provided when adding the new user is its email address. The "recommended" flow I've seen until now is to create the user with a random password and send an email including a password change ticket. My main concern with this approach is what would happen if a valid but wrong address has been provided when creating the user. In such scenario, a non authorized person will be able to set a password and access the tenant data which is a big security flaw. The same question exists even without password change ticket if the login page provides a "Forgot password" flow.
What is the recommended approach when adding new users to a tenant? If the approach I mentioned is appropriate, how to reduce the risk of data access by an unauthorized person?