Adding additional permissions will allow Sub accounts to manage user permissions and restrict certain user access without having to contact the Agency.