Access Profile with Domain Users only

One thing to note about granting Domain Users, is that if you try to remove the entitlement later (termination process), you will see an error that it is not allowed.