There should be a control where employees/staff can have access to only specific sub accounts which they have been assigned to and not all sub-accounts / white label accounts. Right now it is all or nothing