Permissions can be edited in either the "Service Plans" menu item (in the service plan that the subscription uses) or the plan can be customized from the right-hand drawer (fly-out) in the "Account" section.
A separate permission for controlling the status of a domain cannot be selected.