Users /
The same form, empty, creates a new user.
Leave empty to keep the current one.
A global administrator sees everything, including Server, and is the only one who adds or deletes domains. The only global administrator cannot be demoted or deleted.
Granted separately from outbound: the same name on both lists is two assignments. A domain administrator needs at least one domain on either list.