A key to lowering operational costs with PaaS is having a self service channel for Tenants to utilize. Self service refers to the fact that Tenants carry out many PaaS-centric operations themselves without involving an administrator:
PaaS instance creation
Scale-out (request additional capacity)
The self service channel can vary, however a common approach is to provide a basic web application that is available within a corporate firewall.