Define different access level to different sub-users