Link Users to Agency

Have you looked into roles?