General users of sub-accounts are able to change universal settings on the sub-accounts crm. Such business profile and company branding.

I don't want sales reps and file processors to have access to universal settings that only the admin should have access to.

Also when inviting a new user you are able to restrict and hide access to all apps, except the sites app. Is there a way you can fix this to hide the sites app? Would be really important for certain clients.