Sub-account can't be created due to lack of ACLs

[qurname2]

If you want to create a sub-account, but you don't have "administer" access rights on the parent account and you don't want to specify any ACLs, you can't do that due to:
Could not create account "subaccount_name", unexpected error: "call cf4938-a147d3be-5646ef58-b7f44c93 failed: access denied for user "svc-user": "administer" permission for account "account_name" is not allowed by any matching ACE"

[kmalov]

Can you please provide an example in .tf?