The users that belong to the group esdomadm can perform the following domain administrator operations:
Create administrative domains
Create groups within administrative domains
Add objects to groups or administrative domains
View administrative domains, hosts, or modules
Other than the privileges listed above, a user that belongs to esdomadm is just a general user, unless configured otherwise.