The Device Provisioning API has introduced a new field authScope.
Using the new field authScope allows to choose that provisioning is done in the context of your subscription (i.e. service instance) instead of provisioning in context of the current requester, which is still the default.
This will make sure that the created things will be accessible for all users who have access to the same Bosch IoT Suite subscription.
Find a minimal example at Device provisioning in the scope of an Asset Communication package subscription.
You can access the Device Provisioning API at https://apidocs.bosch-iot-suite.com.