Update UI. Make it so that you can't set access to all accounts from the individual account level settings
UI needs to be updated. It is frustratingly easy to accidentally give access to all your accounts, by giving users super admin roles from the individual account settings. One shouldn't be able to mess the whole access system from the individual account level.
I think this is a major security risk and an UI design flaw. Either remove super admins from individual account level or make it so that one has to check boxes to select wanted accounts.
I agree with this suggestion. You should be able to give super admin access to a specific account, without that user having access to the entire MCC. You should also be able to "unlink" an account that has been created in your MCC shell.
This is basic features, and is critical for agencies that make use of your platform.