s3-samr-idl: add Domain Object specific access rights.