diff --git a/server/src/com/cloud/user/AccountManagerImpl.java b/server/src/com/cloud/user/AccountManagerImpl.java
index 8509114e87a..8f4d3abdd7a 100755
--- a/server/src/com/cloud/user/AccountManagerImpl.java
+++ b/server/src/com/cloud/user/AccountManagerImpl.java
@@ -2295,8 +2295,8 @@ public class AccountManagerImpl extends ManagerBase implements AccountManager, M
                 List<Long> grantedAccounts = qs.getAuthorizedAccounts(caller, action);
                 List<Long> grantedResources = qs.getAuthorizedResources(caller, action);
 
-                if (domainId != null) {
-                    // specific domain is specified
+                if (permittedAccounts.isEmpty() && domainId != null) {
+                    // specific domain and no account is specified
                     if (grantedDomains.contains(domainId)) {
                         permittedDomains.add(domainId);
                     } else {