If account purchased 1000 agent nodes to be spread across 4 Orgs, there's nothing built into the appliance where they can lock down the maximum number of nodes to be used per Orgs and it always has to be regulated. If a node number could be locked down by the IT admin, there wouldn't need to be a need to keep managing that aspect of the Org among other Orgs to make sure the maximum number is enforced.

This would also be good for agentless node count. Thirdly, the ability to report on agent/agentless node counts used/available per Org and at the admin systemui level.