Fixed

• Issue where a TPA could not disable groups of a client user for a child account in which the user has a multi-account role in another account

Changed

• Updated interface for TPA users modifying client users which have an account role in a given user’s account, but have a main account which the current user doesn’t have access to. In this case, the TPA can only see the controls relating to the account role (Is active, is admin, is DER), and cannot attempt to edit any other fields on the user