I created an RBAC group and assigned it some basic permissions. I then added a user. the group is called "testgroup". Everything is working great.
Now I need to do something. I need to make the "testgroup" rights function only in one sub-domain called "domain2.root.local"
Can anyone provide a command for this?