readd domains and groups, plus assign roles