A client rights domain contains the Content Servers that share the same set of client rights objects. The client rights domain is configured in a global repository that acts as a governing repository. Multiple repositories can be grouped together under the global repository to share privileged DFC information.

Privileged DFC is the term used to refer to DFC instances that can invoke escalated privileges or permissions for a particular operation. For example, privileged DFC can request to use a privileged role for an application to perform an operation that requires higher permissions or a privilege.