Currently on the business account, if aliases are enabled, any user can create a custom domain for aliases. This poses a security risk for if the user leaves the company and had aliases created with their custom domain, they could take over the accounts by redirecting the email. On business accounts, an alias domain should be allowed and selectable by all users if the admin chooses to create an alias domain and leave aliases enabled.