We add an intermediate role : Reseller. It is somewhere between a super administrator and a domain administrator. A reseller can create objects (a limited or not amount) and then define permissions on those objects:
* Create a domain admins,
* Assign limits to those admins,
* ...
see #105