community 
Portal configuration to allow SSO to creata new user into domain admins group
Consider the following use case:
- SSO is configured for user to log in portal
- All new users will be automatically added to a Training user group, which has access to Training domain
- Any user in this group can create a sandbox in Training domain, and all other users should have access to view and use the sandbox
If the Training user group has Domain admins role, then the above use case can be realized easily.
However, currently CloudShell does not allow new user to be automatically added to Domain admins user group, though System Admin can manually do so. So for now, a work around is to have two user groups; both contain the same users and have access to Training domain, but one has Regular users role and the other Domain admins role. The SSO json configuration will assign new user to the Regular users group, then System Admin has to manually add the user to the Domain admins group.
Can we remove the restriction, or provide a configuration key to allow adding new user to Domain admins group?
Thanks.
-Song
