[marcmac]

Delegated admin such as you've described is a very hot item on our roadmap - managing users under just one domain, or control over just on COS, etc. We can't commit to a timeframe yet, but it's coming.