mgrpAllowedDomain:siroe.com will only match the siroe.com domain.
mgrpAllowedDomain:*.siroe.com will match any subdomain of the siroe.com domain.
mgrpAllowedDomain:*.com will match any *.com domain.
mgrpAllowedDomain:siroe.* will match any top-level domain beginning with siroe.