Use Azure DevOps to manage Sentinel for MSSPs and Multi-tenant Environments

Hi timurengin 
If you use Github sentinel is installing this 

In your organisation/user account. With that comes a Github (Bot) User which has read and write rights. 
In some way (didn't found it in the microsoft docs) the customer service principle has access to that git user atleast to make the inital commits. Is there any blockade between the customer service principle and that speicifc git user?
otherwise it could be possible if you hijack the service priniple user to make commits and changes to other customers if you have an shared repo.

Hope that claryfies your questions.