The subscriber or the account owner can assign roles and define access for each user type.
Settings > Access Roles. For each role, give permission or deny access rights for that role by 'turning on/turning off' access to varies. Hover and click on the buttons on the right.

Video Tutorial: https://youtu.be/2Xv4Y3LMvY8