Currently anyone with account access can add additional users to the account. We will be releasing roles very shortly to restrict this permission.