Changes for createDomain - create new group AND createAccount - add account to domain group
Support attaching policy to account.