Workspace owners should be able to manage access at the workspace level. Currently, if a user has been given any access to a workspace line then that access is reflected in the workspaces beneath it. However, an owner of one of those workspaces should at least be able to increase that access for the specific workspace.
To decrease the admin burden, Workspace Line owners should be able to manage permissions for all their users at an individual workspace level (ie manage which users have what level of access on a workspace by workspace level).