It would be far more useful if we were able to create per site users and "restricted" control panel users.