Additional Domain Permissions

There are a few permissions that are unique to domains. These permissions can be set for individual domains or sets of domains.

If you are working with domains, you can set the following additional permissions:

• Select Unlock Account to allow accounts used to access a domain

  permission to manually unlock managed domain accounts.

• Select Add Account to allow a user to add Privileged Access Service

  domain accounts. If this domain permission is not selected, attempting to

  add a new account will fail.

For more information about working with domains and adding and unlocking accounts, see Managing Domains and Setting Domain-specific Policies.