valid_actions: ["create", "reset", "disable", "enable", "modify"] domain_admin_group: "Domain Admins"