Can I create a secondary Domain/PO with limitations of no deleting of email
and no changing of passwords for all users that I put in it?