Google Workspace – How to Delegate Google Apps Access Between Accounts

Unfortunately, there's no completely automated approach to this. Either you or your users will need to follow this approach:

1. "Re-name" all of the users on the domain you want to migrate. Re-naming actually gives you the option to change which domain a user account is part of. See Google Help Article.
2. Once you've moved all the users to your main domain, you can delete that domain from the original (temporary) google Apps account. Because none of the users have been deleted, all of their email, calendar, docs, etc. will still exist in that account.
3. Create the new Google Apps account with that domain name
4. Create user accounts for all of those users in the new Google Apps account
5. Use Gmail-Backup to backup all of the users' emails, and then use the same tool to restore those emails (together with all labels) to their new account. If you're doing this yourself, you'll need to temporarily set all of the users passwords to something you have access to.
6. If necessary, you can also log in to each of those user accounts and export their mail filters and then re-import them on their new accounts.
7. Go into calendar settings in each users Google Calendar account, and "share" each of the users calendars with their new account. Give them access to "make changes and manage sharing". If this doesn't work, it's probably because your current Google Apps account has the calendar settings too restrictive, you need to be able to share calendars with users outside this organization (namely your new Google Apps account)
8. Go into Google Docs for each user, and go to "All Items" under "More" on the left. Scroll to the bottom and make sure that all items have finished loading. Then select all docs using the checkbox at the top left and then select "sharing". Share all of these Google Docs with the users new account. Again, you may encounter restrictions from your original domain that you have to remove. You also may encounter issues sharing documents that were originally shared with this user by someone else. In that case you may have to share all of that users' own Google Docs with their new account, and then handle individually the items that were shared with them by others.

There is (unfortunately) no other way that I know of to transfer an account from one Google Apps domain to another. Although there are many steps here, it's not a very big job unless you have many users.

It really depends on what kind of services you want enabled on the respective domains and what you need for each of them.

If you have 10 domains under your control, but 7 of them were registered to catch those spelling mistakes in accessing your main domain, then it would be good to add these 7 domains as an alias to your main domain in Google Apps.

As for the remaining 3 domains, lets say they were registered as special domain names for the different projects in your organization and not everyone in your organization is involved in that special project. If you don't require Google Sites for that domain, then you can just add the domain as another domain within your parent organization's Google Apps.

Like you said, adding all the domains into one Google Apps is good as it is a central area to control things, though it is subject to certain limitations. You should have a separate Google Apps if you want to enjoy all the benefits that a primary domain has, for that special domain name that you might have.