hmm I think we can work with the role, i checked if i assign a non admin role, it only shows user subsidiary so I think that should be work