Rename member role to viewer role for MailDomainAccess. A viewer is only allowed to see list of mailboxes created for a domain. It makes more sense to name it viewer.
Add some status to allow to create mailboxes only for an active domain