Currently the permissions are tagged to email however it should be at different sub account level. One user can be a admin at one sub account while normal user in other sub account. which is not possible at the moment.