Hi Vamshi,
You should think on a tenant in terms of an organization. (tenant~organization).
You can create a single tenant for the entire organization or a tenant per division in the organization.
You can configure each tenant to integrate with another Identity provider (IDP) etc...
Each tenant can have several settings that will be applied on each site.
A site is a web-site within the tenant.
A tenant can have multiple sites, where each site serves different roles or intend to be used by different people (internal facing site and external facing site).
You can think on a widget as of an application. When a widget is placed in a site, that instance properties, for example, auto-scale on or off) can be configured within the site.
A site also has properties, and they are adjustable and changeable by the site properties.
The data of the sites is saved in Hana DB that is installed in the cloud.
The data is saved on the tenant, so the different tenant cannot access the each other data.
Only users of the tenant can access the data. SAP system operators cannot access the data unless you explicitly allow them.
Best,
Sapir