I would like to be able to restrict sub-accounts to the specific apps that I want to give them access too.

Similarly, I would like to be able to ensure that a sub-account has my branding (vs allowing the sub-account owner to brand it their own way).

Effectively, this combination of features would allow me to sell access to a sub-account effectively as a SaaS product... then within that upsell the client more features, marketing services, and even the ability to remove my branding from their account.