A user cannot add an account to your PAA. The PAA Administrator must send an invite to the user and they must accept the invite. As the PAA Administrator, you can unlink users from the account at any time, and the individual user can also unlink from the PAA at any time.