It would help to expand the current DRA HCU, to include some level of Domain Access account check. This could be a check that validates if AD can return a group membership list for the Domain Access account. This could also be a check that verifies if…