Each role has their own subdomains which can be set manually, or can inherit from the global domain with a default prefix.