Along with the ability to create sub-accounts comes detailed access control. For each sub-account you create, you are able to specify, in detail, what areas of your account they may access, and what actions they may perform.
This enables you to create sub-accounts which match directly the roles you have assigned to your staff. For example, someone whose role is to generate reports will not be able to execute transactions.