Manage domains
Create a new forest
Create a new domain tree
Create a new child domain
Manage a different domain
Remove a domain
Manage the domain using a different domain controller
Add user principal name suffixes
Delete extinct domain metadata
Raise the domain functional level
Assign, change, or remove permissions on Active Directory objects or attributes
Manage organizational units
Manage domain controllers