How to add a server side check that api is only called by tenant admin

Question

My requirement is to add a check here that this API route/end point is only called by tenant admin.

AppController.cs

        [Route("api/[controller]&qu