If you go to the subsite, break permissions inheritance and grant the
user Full Control permission level they will have administrative
authority from that site down in the hierarchy. There will be a few
things they can't do that are reserved for the Site Collection
Administrator or require administrative access to the root level site,
but they will be able to create, modify, and delete permission levels
and groups that they create.