add test for domain admins