Forest

Well I need a hint getting root. I can add user to the 2 Ex groups, but cannot seem to get the DCS right added properly. I am not actually sure which Domain Object I should add it to. Because the right is not added, getting secrets fails.

Am I on the right track?
Thanks