Provide Domain Access, but disallow subdomain access

[ideawire_bb]

Hello.

We have a client that needs the ability to create email accounts on their primary domain, but for which we want to disable access to their subdomains (so that they don't accidentily delete something).

Is this feature available?

Thanks.