Best Practices For Deploying a Multi-Tenant Enviroment on a 10K running 11.2

Pretty simple to do and works well. As you say, separate users can manage objects in their own partition and traffic is kept segregated. My best suggestion is to create simple naming rules and stick to them. Probably worth implementing remote roles/user auth to differentiate users.