After multiple trial-and-error multi-tenancy SharePoint 2013 Farm setups according to Understanding multi-tenancy in SharePoint Server 2013, I've summarized what is missing in the article.
- Add "Full Control" administrator permission to Web Application Pool. User Profile Properties inside Tenant Administration Site will work properly.
- Associate User Profile Service, Managed Metadata Service, and Machine Translation Service with default service association pool to minimize health warning.
- SSS and BDC administration links are missing from Tenant Administration Site. Use feature available in CodePlex to recover the functions.