I have a group of users who needs access to view/create transactions in multiple subsidiaries -- is there any way to do this beyond creating them a custom role that includes the relevant subsidiaries?

Subsidiary permission can only be managed with roles