Is it intended that BES can only "see" accounts that are in the same domain as the BlackBerryManager user ?

I have 1 BES server in trial, talking to one ZCS NE server which hosts many domains.

It seems I can only activate / provision / see accounts from the same domain that the manager account was created in, thus I am not able to let users from other domains connect via BES ?