Make a new user role "Paid Portal Member". These members can also add at least passwords to the portal, so they can use it as their own password manager.
They should also be able to select what their own employees can see in the portal through roles.
Obviously this is a paid service which we as MSP can sell.