Advanced User Permissions - to the domain and beyond