There are a few permissions that are unique to domains. These permissions can be set for individual domains or sets of domains.
If you are working with domains, you can set the following additional permissions:
- Select Unlock Account to allow accounts used to access a domain permission to manually unlock managed domain accounts.
- Select Add Account to allow a user to add Privileged Access Service domain accounts. If this domain permission is not selected, attempting to add a new account will fail.
For more information about working with domains and adding and unlocking accounts, see Managing domains and Enable manual account unlock using administrative account.