I see that I can test this
[root@ipa-replica ~]# ipa server-show
Server name:
ipa-master.company.com Server name:
ipa-master.company.com Managed suffixes: domain, ca
Min domain level: 0
Max domain level: 1
Enabled server roles: CA server, NTP server, AD trust agent, AD trust controller
[root@ipa-replica ~]# ipa server-show
Server name:
ipa-replica.company.com Server name:
ipa-replica.company.com Managed suffixes: domain, ca
Min domain level: 0
Max domain level: 1
Enabled server roles: CA server, NTP server
L.