Restrict an admin to a secondary domain for users/emails?

[workshop]

In our Google Workspace, I have a main domain name (X.com) and a secondary domain (Y.com)

I created an organization unit that looks like this:
X.com
Y.com
...

As expected, I have a super admin (admin1) for the whole organization. I then created an admin account (user2) and a custom admin role that only has Users creation permission and assigned it to child organization unit Y.com

Now, here is my feature request / question and I think there is a use-case for ir:
I want admin2 to only be able to create users/emails in Y.com domain, for example (test@Y.com), but right now they can also create test@X.com too! (Please see attached screenshot below)

P.S. I know organization units and emails have nothing to do with each other. This is more of a feature request.

Thank you!

[icrew]

You might want to post this to the Feature Ideas section here. Doing so will allow it to be upvoted by others and possibly considered as a future feature enhancement.

If you do not already have access, you need to request it first. See https://www.googlecloudcommunity.com/gc/custom/page/page-id/Workspace-Feature-Ideas-FAQ for how to do that.

Once you have access, go to https://www.googlecloudcommunity.com/gc/Feature-Ideas/gh-p/workspace-ideas-group . There, you can upvote and comment on any similar idea, or post a new idea.

If you are submitting a feature idea, be sure to explain the problem that you're trying to solve with the feature idea, not just the idea itself. For example, saying "when my users are trying to do 'A', they often get confused by the fact that the buttons to do 'X' and to do 'Y' look quite similar to each other, which leads to this unintended consequence" is far more likely to get fixed than a feature idea that just says "change the color of the button 'Y'".

Cheers,

Ian