We are detected that if you use the *ALL** Access Groups, new child domains are added to the access groups automatically.
When creating a new Access Group and select domain, new domains created after this are not enabled for the access group.
The TSCO administrator must open an existing Access Group and enable the new created domains created the group.
This is a maintenance effort which is not required and sometimes forgotten.
An option to include new domains when created into that access group would help to reduce the maintenance effort.
Whilst the current implementation way is good, when the access to some child domain should be granted.
But in most cases the user want to have access to all child domains, and also to new child domains created in the without any maintenance tasks.