To set the permission of subaccount, please click Role list, there you can see the permission assignment setting.