Complex Sub-Authentication Requirement

Hi

I have a complex authentication required where I need a user to be able to create an account and then once approved, the Owner is able to manage 5-6x sub-accounts that are linked to that account.

Owner should be able to change the email address, password, enable/disable the account.
Sub-accounts can not make changes at all and can only see things within that Owners “space” so like child-accounts and not interactive in anyway with other Owner accounts.

At the moment I have hand-crafted this in php which works ok but wanted to know if this was possible to achieve in Auth0?

Best Regards