MSP partners require a role that is not a MB role and also not a WSA role, but yet has the ability to add non-WSA users. Additionally, this role should prevent a user from being added to the wrong WS, that being a WS where the user is not in the related active directory account. The use case relates to MSP partners performing L1 support across multiple end-customers.
