I think having the bootstrap process grant the admin user roles in the new domain would probably be the way to go.
I think having the bootstrap process grant the admin user roles in the new domain would probably be the way to go.