Support role can change domains, create vsites on behalf #4451

#4451