How does domain control work for a subaccount?

Master can share his own white-labelled domain with Subaccount so that Subaccount doesn't have to do any DNS record update and can start using the domain to send emails. Also, the master account has the control to allow or restrict Subaccounts from adding the domain of their choice.