Domains defined below can be used in the group-domain access policy configured at the upper section "User group access policy".