Each domain maintains associations between users and roles, and implements role inheritance. Role inheritance means that if there is no explicit role for a given user in a domain, the role this user has in the superior domain (if any) will be used.

For example, if joe@myCompany.com has the role operator in myCompany.com, then joe@myCompany.com will have role operator in domain montreal.myCompany.com also.