The following group is defined in the site context /System domain:

The following groups are defined in the site context /User/Unaffiliated domain:

These groups and any other groups established when your Windchill solution is installed are used during the normal operation of your Windchill solution and should not be removed. Domain-based access control rules can be automatically loaded in the site context /System domain granting permissions to members of these groups, except the Unrestricted Organizations group. The rules for the members of the Unrestricted Organizations group are loaded in the site context /User domain.