Yes! This actually extends beyond the concept of users. Eg people have similar problems when provisioning different access levels to different workspaces, or different compute instances. We use a concept called “entities” to handle this, where each entity is a sub account that lives under a customer. Each entity can they have its own set of features, meters and even subscriptions.
Connecting this all to auth systems is still a flow we’re hoping to make cleaner. It’s in early stages for now.
(just to be clear, not relevant in my case at this point, just something that was a bit messy to handle in something I worked with previously)