I can't find the docs stating it but cross tenancy domain changes are not allowed, they are considered too big a security risk.

You are correct that endorse/accept work for everything else.