https://idgol.com/which-are-the-3-master-roles-available-in-additional-domain-controller