Hi there!
If you're talking about the domain tunneling option for authenticating to ONTAP, you can either use an SVM with an existing domain connection, or create a dedicated one for it. Either is fine - for enterprise use, I'd create a dedicated one.