If your roles are set up with access to just the user's subsidiary - it would auto-default for you.