Using a Subaccount for HIPAA restrictions

Hi everybody,

We have instructors who use our main Zoom instance for teaching classes.  However, some of those same users need to use Zoom in HIPAA compliant environments with additional setting restrictions.  
We can't use the Group feature because we'd need to move the instructor into, and out of, the group, depending on whether they're teaching or needing a HIPAA compliant environment.
Would creating a subaccount be the way to go?  Any pitfalls we should be aware of?  Ultimately, we want the user to log in with one set of credentials and choose whether they want to use the main instance/site or the HIPAA instance/site.

Any recommendations would be appreciated.  Thank you!!