add role enable-groupware-features to new domains. check if domainadmin has tbitskolaballowgroupware set to true when he wants to assign this role to a user. adjust roundcube config so that it only shows groupware features if the user has that role