As Owner of the agency, it could be easier if we want to restrict the access to a specific sub-accounts just with switch on and select the sub-account(s) to the admin/user at agency level that we need to restrict, even for an admin and must be totally hidden if the owner restrict to the any admin, because now if we want to restrict to only one sub-account to a specific admin user at agency level, it is needed to select all sub-accounts less one sub-account. That is impractical and the admin users at agency levels can know when the owner of the agency are restricting to a specific admin