The *only* way I can get this working is:
1. Create an administrator using the Global Admin
2. Enable the checkbox [ ] Administrator
3. Add to distributionlist domain administrators
4. Select the user from the account list, click on Configure Grants
5. Add two grants:
Target type: domain
Target name: the domain you created the domain admin for
Right type: System Defined Right
Right name: domainAdminConsoleRights
Add and repeat, but put domainAdminAccountRights in the last step
