I was just following some posts here and would just say to keep in mind you will be using a lic seat for each subscriber you add, why dont you use call handlers instead and change the transfer settings to the extensions you want.
Ive came accross similar issues..My recommendations...Install the Permission wizzard for unity 4.2, this tool is alot more detailed and can also just report on the permissions thats already applied. Only note on this is that you must extend the AD sc...