Multi forest environment with users in ForestA and computers in ForestB. The MCU is unable to use domain local groups in DomainB to define roles.
The MCU will only browse or setup the domain it is connected to. It doesn't have cross domain functionality or cross forest functunately. The QAS agents can be setup to do cross domain, two way and one way.