Currently, manual account registration being deactivated is the only form of 'superuser' control of the system.
It would be very useful if HeyForm deployments could have a provisioned workspace mode, in which only a superuser can create workspaces and assign and remove users from them. This is a necessary data access control requirement for many use cases.
To make this mode work smoothly, the superuser should be able to create accounts and add them to a workspace, rather than just be able to invite an account to the workspace.
The ability to designate accounts as workspace admins would be a useful extension of this.