Added the Domain-InternalFederation.ReadWrite.All application and delegated permission for updating the domain resource. The delegated permission is the lesser-privileged higher-privileged alternative to *Directory.AccessAsUser.All* delegated permission while the application permission allows applications to update domains with their own identity without a signed-in user.